Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 232 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出义务识别基准 ObligationBench，并训练护栏识别 Agent 未履行的安全义务
Published Oct 8
Evaluated models ObligationGuard , Claude-Opus-4.8 , GPT-5.6-Sol and others17 Abstract 义务是护栏缺口。作者认为编码智能体的安全不能只靠拦截禁止动作，还要找出终止时仍未做的安全关键动作，并将其称为义务。
提出红蓝对抗评测平台 ACEA，分开计量攻击强度与防御效果
Published Sep 8
Evaluated models openai/gpt-4o , google/gemini-2.5-pro , google/gemma-3-27b-it and others5 Abstract ACEA 用 ASAP 让红蓝对同一目标对打。ACEA 是让可插拔红队和蓝队共享一个目标 LLM 的对打场地，把攻击强度和防御效果分开记分。作者要补三处空缺：双方只能对着固定对手分开练。LLM judge 分不清真实泄露和幻觉，拦截后又看不到攻击有多强。
测量思维链将提示中 PII 复述进轨迹的泄漏并评测轻量检测器
Published Mar 6
Evaluated models Llama 3.3:70B , Claude Opus , Mixtral 8×22B and others7 Abstract 作者称 CoT 抬高逐字泄漏且随模型与预算而变，检测器也需按模型选择。在“不要复述 PII”的输出策略下，本文用 black-box 协议测量提示词中的 PII 被写回 CoT 与答案的情况，并比较轻量 gatekeeper。
You have reached the end