Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
All papers Found 10 papers Another 233 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
构建 Workerville 基准，测量组织条件如何改变 Agent 的安全行为
Published Oct 8
Evaluated models GPT-5.2 , Claude-Sonnet-4.6 , Gemini-3.1-Pro and others6 Abstract 作者用 ACB 与 Workerville 测量组织条件对智能体安全的影响，并称结果支持可量化的组织行为框架。Workerville 用组织行为测量智能体安全如何随监督、同伴和记忆条件变化。 。要处理的缺口是：持续运行的 LLM 智能体同时接收用户指令、同伴消息和长期记忆，但既有安全评测多把这些通道拆开，没有统一的定量测量。
提出检索可采纳性核验框架，评测记忆智能体的记录资格与披露
Published Oct 6
Evaluated models DeepSeek V4 Pro , Gemini 3.6 Flash , GPT-5.6 Luna and others7 Abstract 作者用三值可采纳性和匹配召回界审计长时记忆检索，并分开报告支持、资格与披露。这是一套长时记忆检索的可采纳性核验协议，用来分开检查候选支持、资格、提示词暴露和答案披露，而不是提出新的检索算法。 。
提出 AMU 按推导图门控企业 Agent 共享记忆的列级访问
Published Oct 6 Abstract 在完整血缘下，AMU 按列权限放行缓存，并标出同名 KPI 冲突。AMU 用列级推导门控共享记忆，拦截经缓存流出的无权敏感列，并标出同名 KPI 的定义冲突。
提出 StateWise，在编码智能体行动前诊断并修复失效持久状态
Published Oct 4
Evaluated models GPT-5.6-sol , DeepSeek v4 Pro , Qwen 3.7 Max and others4 Abstract StateWise 在动作前修复失效的持久前提。StateWise 是在执行带副作用的动作之前，诊断并修复编码智能体持久操作状态的框架。
用 FARSIGHT 方案级评测金融 LLM 交易 Agent 的稳健性与安全失败
Published Sep 17
Evaluated models ChatGPT Deep Research 评测 Agent 记忆系统的软撤回执行情况，并提出陈旧检索防护
Published Sep 8
Evaluated models GPT-5.5 , Grok-4 , DeepSeek-V4-Flash and others9 Abstract 系统揭示了记忆系统软撤回在检索时普遍未执行的安全漏洞，证明写回会击穿现有防御，并提出读取端防护作为必要控制手段。
提出 S³，用 guard agent 编排阶段安全技能防御智能体多阶段风险
Published Aug 3
Evaluated models DeepSeek-V4-Pro , DeepSeek-V4-Flash 提出 HazardArena 基准，用孪生场景评测 VLA 的语义安全
Published Apr 14
Evaluated models OpenVLA-OFT , π0 , NORA and others4 Abstract safe-only 微调提升良性执行，也提升匹配不安全孪生上的危险完成。HazardArena 评测 VLA 在运动要求不变时，能否因语义风险而停手。
Proposes out-of-process dual-channel comparison classification to intercept erroneous clicks by computer-use agents
Published Mar 16
Evaluated models multi-modal-embed-small Abstract Perception errors can be exploited by swapping screen pixels.The authors frame CUA's perception failure as a security vulnerability, visual confused deputy : the agent authorizes click(x,y) based on a misread screen, and the actual landing point differs from the element it believes it is clicking.
提出 LABSHIELD，评测科学实验室智能体的安全推理与规划
Published Mar 12
Evaluated models GPT-5.2 , GPT-o3 , GPT-o4-mini and others20 You have reached the end