Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 240 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
评测容器、权限规则与沙箱能否区分编译器与编码 Agent 的文件读取
Published Sep 29 Abstract 此 harness 表达不了编译器可读而智能体不可读，五条路径两边都不覆盖。作者在物理流求解器上检查一套编码智能体配置：编译器必须读本组材料与反应模型，这些字节又不得进入模型上下文或离开本机的记录。
提出 AuthBench 评测编码 Agent 最小权限，并验证充足性-紧缩性分解
Published May 14
Evaluated models GPT-5 , GPT-5.3-Codex , GPT-5.4 and others9 Abstract 论文提出权限边界推断基准与两阶段分解方法，有效降低安全暴露。本文研究代码智能体在执行终端任务前自主推断最小文件权限边界的能力。
分析少样本示范对 RoP 与 ToP 提示防御抗越狱效果的影响
Published Feb 4
Evaluated models Pangu-Embedded-1B , Pangu-Embedded-7B , Pangu-Embedded-7B-Think and others9 Abstract few-shot 可抬高 RoP、压低 ToP，但表内有反号，Think 模型更低。作者评估 few-shot 示范如何改变 RoP 与 ToP 对越狱的防御效果。
提出 BrowseSafe，在工具输出边界检测并拦截浏览器 Agent 提示注入
Published Nov 26, 2025
Evaluated models Qwen3-30B-A3B-Instruct-2507 , Qwen3-8B , PromptGuard-2 (22M) and others10 You have reached the end