Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 233 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出 SBW，为 LLM Agent 轨迹做抗改写与伪造的语义行为水印
Published Oct 7
Evaluated models Qwen2.5-3B-Instruct , LLaMA-3.2-3B , Qwen2.5-7B and others5 Abstract SBW 在语义簇上做溯源水印，改写检测高于精确符号，链式重放仍开放。SBW 是免训练的智能体行为水印，把所有者标识放在离散动作选择上，而不是输出 token。
提出 EC-Agent 联合回执，绑定工具智能体的主张、证据与执行并支持重放审计
Published Sep 29 Abstract EC-Agent 把主张、片段、执行前缀和来源状态绑成可重放回执，并把完整性与语义支持分开判定。EC-Agent 为工具智能体的审计增加一份可重放的联合回执：它同时绑定发出的主张、精确来源片段、有序执行前缀，以及该次执行看到的来源版本和访问状态。
提出 AttestChain，将供应链安全智能体报告签名上链并据此控制发布
Published Sep 25
Evaluated models GPT-class LLM Abstract AttestChain 将智能体报告与链上发布门控结合，现有证据来自受控合成构建的总体结果。AttestChain 是一个把 LLM 安全检查、智能体身份验证和许可链发布策略连接起来的软件供应链防御框架。 。
提出类型化溯源与断言护栏，约束持久 Agent 释放自传断言
Published Sep 2 提出 SeqWM，把水印写入智能体动作转移并用随机密钥检测
Published May 11
Evaluated models LLaMA-3.2 3B Instruct , Gemma 4 E4B-it , Qwen3-4B Instruct Abstract SeqWM 以条件转移嵌行为水印。SeqWM 是给 LLM 智能体动作序列加水印的框架，用来在只看到动作时判断轨迹是否来自持有密钥的带水印源。
You have reached the end