Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
All papers Found 12 papers Another 261 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
Show that reward hacking can propagate through code, memory, and plans in multi-agent coding systems
Published Oct 9
Evaluated models Qwen2.5-Coder-14B , Gemma-3-12B , Qwen2.5-Coder-7B and others16 Abstract The authors state that reward hacking can spread across models and affect routing and aggregation, and that review can reduce delivery.Reward hacking induced by coding RL can leave the source agent and enter subsequent collaboration and system coordination.
提出 agent plasticity 指标衡量智能体通过经验自我改进的效率
Published Oct 7
Evaluated models Claude Fable 5 , Claude Opus 5 , GPT-5.6 Sol and others10 Abstract 作者用固定权重协议比较前沿模型把经验写成制品后的留出增益与习得效率。作者用 agent plasticity 衡量一件事：权重冻结时，智能体把经验写成可继承制品，再换成留出能力增益，这个转换有多省。
提出 StateWise，在编码智能体行动前诊断并修复失效持久状态
Published Oct 4
Evaluated models GPT-5.6-sol , DeepSeek v4 Pro , Qwen 3.7 Max and others4 Abstract StateWise 在动作前修复失效的持久前提。StateWise 是在执行带副作用的动作之前，诊断并修复编码智能体持久操作状态的框架。
提出 FAME，用反事实概念漂移评测智能体虚假记忆
Published Sep 30
Evaluated models Llama-3B Abstract FAME 用反事实引起的隐状态概念漂移，在出答案前区分忠实记忆与虚假记忆。FAME 是一个免训练的评测框架，用来判断自主智能体的记忆在虚假相关、环境偏移或知识冲突下是否已变成虚假记忆。 。
访谈残障成人，分析向记忆型助手披露残障时的信息流与语境完整性
Published Sep 19 提出 PMPA，经外部源向 Agent 持久记忆投毒并跨会话泄露隐私
Published Sep 12
Evaluated models DeepSeek-V4-Flash , DeepSeek-V4-Pro , Qwen3-Max Abstract 论文提出了持久记忆投毒攻击 PMPA，报告了 harness 智能体在处理外部数据时易受跨会话记忆投毒与隐私泄露的风险。
提出针对 Agent Harness 的上下文特权提升攻击
Published Sep 1
Evaluated models GPT-5.5 , GPT-5.4 mini , Claude-Sonnet-4.6 and others7 提出 SkillMisevo-Bench，量化自改进 Agent 的技能误演化
Published Aug 13
Evaluated models Claude Code , Codex , Hermes and others4 用演化算法构造 mind virus 并测量其在多智能体中的传播
Published Aug 11
Evaluated models Claude Haiku 4.5 , Claude Sonnet 4.6 , Gemini 3 Flash and others7 构建 ContextWeave，评测办公工作流智能体记忆的下游增益
Published Aug 5
Evaluated models DeepSeek-V4-Pro , GPT-5.5 , GLM-5.1 and others5 Abstract ContextWeave 用真实办公任务流检验记忆是否改善工作区质量与偏好对齐。ContextWeave 是面向语言智能体记忆的纵向基准，用来看召回先前经验能否让后续办公任务做得更好。
提出 S³，用 guard agent 编排阶段安全技能防御智能体多阶段风险
Published Aug 3
Evaluated models DeepSeek-V4-Pro , DeepSeek-V4-Flash 评测编码 Agent 记忆文件中提示注入的跨会话影响
Published Jul 16
Evaluated models Claude Haiku 4.5 , Claude Opus 4.7 , GPT-5.2 and others4 Abstract 已植入记忆文件的载荷可以跨会话影响 Claude Code 与 Codex，攻击成功与载荷是否留下是两种不同的失败。Bad Memory 在沙箱合成工作区里评测文件型持久记忆上的提示注入，比较载荷能否改变当前会话，以及能否在后续会话中留下或叠加。
You have reached the end