Translation in progress Some entries still include text in the original language.
Oct 13 · Tuesday
Another 216 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出 Tracekit，审计编码 Agent 的意图、推理与动作并检测账本篡改
Published Sep 29
Evaluated models Claude Code (claude -p, version 2.1) , 独立评审（同一 CLI，无工具） Abstract Tracekit 把意图、自述和动作写入可锚定的哈希链。Tracekit 是无第三方依赖的编码智能体审计层：把人类请求、模型自述和已执行动作并排写入可外部锚定的哈希链，执行前用正则门，事后用规则和独立模型互查。
提出控制标记注入，清空工具 Agent 的思维链以绕过推理监控
Published Sep 23
Evaluated models openai/gpt-oss-20b , google/gemma-4-26B-A4B-it , deepseek-ai/DeepSeek-R1-Distill-Qwen-7B and others4 Abstract 论文阐明控制标记注入可抑制 CoT 使监控失效并促成拒绝绕过，且工具执行受解析器宽容度影响。
系统梳理智能体执行链路中的越狱攻击与防御并比较推理时防御
Published Sep 11
Evaluated models Qwen3.5-4B , Llama-3.1-8B-Instruct Abstract SoK 将越狱重放到智能体流水线，并用两种模型检验回复层防御的边际与代价。Mia 等人把越狱安全从单轮回复扩展到智能体的规划、记忆、工具和智能体间通信，并问既有结论在更强原生对齐下是否还成立。
提出 CoT Forgery，经用户消息或工具输出注入伪造推理
Published Feb 23
Evaluated models gpt-oss-20b , gpt-oss-120b , o4-mini and others11 Abstract 提示注入被作者解释为角色感知失败：听起来像某角色，就在表示里成为该角色。作者把提示注入解释成角色感知失败：标签划出的权限没有进入模型的内部几何。
You have reached the end