Translation in progress Some entries still include text in the original language.
Oct 13 · Tuesday
Another 215 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
定义工具调用 Agent 的持久计费状态，提出拒绝钱包攻击与防御
Published Sep 23
Evaluated models GPT-4o , GPT-4o-mini , Mistral-Large and others7 Abstract 已准入工具返回的跨轮保留会重复计费。这篇工作把工具调用智能体里跨轮保留、并被提供商反复计费的外部工具返回定义为 persistent billable state，并把它的主机侧再次送入决定当作控制点。 。
提出 FLOWSEAL，用工具级信息流控制阻断智能体隐私泄露
Published Sep 12
Evaluated models DeepSeek-V3.2 , GPT-4.1-mini , Gemini-Flash-2.5 Abstract 作者分析大模型智能体隐私检查与攻击面重合问题，提出外部拦截防御 FLOWSEAL 并验证有效性。
提出 RARE-Guard，阻止逆向观察被提升为指令或已验证声明
Published Jul 14
Evaluated models gpt-5.5 , claude-sonnet-4-6 , gemini-2.5-pro and others5 Abstract 成对二进制衡量无效提升。作者定义的失败是：LLM 辅助逆向中，忠实提取的二进制观察获得它并未赢得的指令权限、声明证据或可信状态。
提出间接数据投毒攻击，操纵科研智能体得出虚假结论
Published Jul 12
Evaluated models Claude Code with Claude Opus 4.7 , Codex with GPT-5.5 , Gemini CLI with Gemini 3.1 Pro You have reached the end