Translation in progress Some entries still include text in the original language.
Oct 13 · Tuesday
All papers Found 19 papers Another 215 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
Proposes RSI-Anything, which uses a world model to select candidates and retain policy updates.
Published Oct 10
Evaluated models ReasonFlux-Coder-7B , 4B policy , W1 Abstract RSI-Anything integrates world models into recursive self-improvement through prediction, feedback, and retention checks, and reports gains across multiple domains.RSI-Anything is a cross-domain framework: it uses world model predictions to decide which candidates to take external feedback for, then uses the feedback to decide whether the policy, workflow, or predictor is updated, and uses checks to decide which pair is retained. The difficulty to address is the limited interaction budget, and the fact that once the policy changes, the candidate distribution faced by the predictor also changes. The authors argue that improving only one side does not guarantee that the assembled system will be better.
Proposing EviRepair, an evidence-driven multi-agent framework for repository-level vulnerability repair
Published Oct 9
Evaluated models DeepSeek-V4.1-Flash , GLM-5.2 , Qwen3.8-27B Abstract EviRepair uses a reviewed vulnerability model for repository-level repair.EviRepair is a repository-level automated vulnerability repair framework for sparse vulnerability reports, using a reviewed vulnerability model to separate diagnosis from patch synthesis.
Proposes a local dual-model closed loop to generate edge scenarios for autonomous system safety assurance
Published Oct 9
Evaluated models PPO Abstract Local closed-loop generation of JSON edge cases.The authors built a local agentic loop that runs on a laptop to generate edge cases for safety arguments of autonomous systems, rather than releasing a new public test set.
Proposes EndoRSI, recursively improving endoscopic robot policies with physical evidence
Published Oct 9
Evaluated models Qwen3-VL-4B A survey of risks, defenses, and evaluation in the six-stage lifecycle of world models
Published Oct 9 Abstract Safety is written as a property of the prediction-decision closed loop; claims must be linked to observed consequences and versions.World model safety is organized by the nature of the prediction-decision loop, not by isolated prediction scores.
Propose COAP, which uses stateful code to control a robot at test time without a model
Published Oct 9 提出 CARE，离线认证 VLA 加速配置的回合级失败风险并选出最快合格候选
Published Oct 7
Evaluated models OpenVLA-OFT , π0.5 , π0 and others5 Abstract CARE 以配对回合认证加速诱发失败，在预算内选最快候选，不足则保留参考。CARE 在部署前从加速配置中选出最快、且加速诱发失败风险能被有限样本认证为低于用户预算的候选。证据不足就保留全计算参考策略。
提出用可逆网络为给定 AI 控制器寻找可证明前向不变集
Published Oct 5
Evaluated models Pendulum AI-controller , Cart pole AI-controller , PVTOL AI-controller Abstract 用潜空间超矩形加解析验证，为事先给定的 AI 控制器寻找 FIS。本文处理的是认证场景：AI 控制器事先给定，不能为了构造 Lyapunov 函数去改控制器，却仍要给出可解析核验的安全依据。
审计机器人安全监控的细化缺口，比较表面计划与图细化轨迹的裁决
Published Oct 2 Abstract 表面轨迹可漏掉图诱导的禁区进入。作者审计 RoboGuard 的一个假设：对高层动作轨迹的安全裁决，在补上语义图诱导的导航和已记录隐式效应之后是否仍然成立。做法是不改验证器，并固定同一条 LTL。
提出 Mid-Harness，在执行前验证并筛选终端智能体的候选动作
Published Sep 30
Evaluated models TMAX-9B , TMAX-4B , TMAX-27B and others6 Abstract Mid-Harness 在执行前选择候选动作。Mid-Harness 在不改生成器和执行 harness 的前提下，于二者之间做动作级测试时计算，用来研究终端智能体里“多采样、再验证”何时提高轨迹成功。
提出 PatchHolmes，用混合检索和列表式智能体选出 CVE 修复提交
Published Sep 30
Evaluated models Qwen3-235B , Qwen3-Coder-30B , gpt-oss-120B and others4 Abstract PatchHolmes 用混合检索和列表式四工具智能体做补丁检索，增益主要来自联合阅读候选而非更换骨干。PatchHolmes 是面向补丁检索的两阶段系统：在本地 Git 仓库上用冻结开源权重模型，为一个已知 CVE 找出修复提交，不做按仓库微调，也不使用付费外部搜索 API。
提出 SelfSearch，用自我修改记录无奖励搜索改进编码智能体
Published Sep 30
Evaluated models gpt-5.6-luna , deepseek-v4-flash-0731 提出 TAIP 持续保障，在策略或证据变化后重算仓库审计交付门裁决
Published Sep 28 Abstract TAIP 把策略、证据和执行分开，在保留的 RepoAudit 证据上于 5s 预算内重算合并门姿态。TAIP 是放在未修改 RepoAudit 之外的保证层，用来在软件交付门上重算智能体安全控制的当前姿态。
提出 Opera 口头批评框架，跟踪长程编码 Agent 的执行纠正
Published Sep 28
Evaluated models Qwen3.5-9B (thinking) , Muse-glimmer-30B (high) , Qwen3.8-27B (xhigh) and others4 Abstract Opera 用可审计的持久纠正笔记提升长程编码智能体，并可用引导轨迹做近似 on-policy 微调。Opera 是给长程编码智能体用的口头批评框架：每次纠正是一条要跟到解决的持久笔记，而不是一次性评语。
提出 Djinnlang，使人只写无歧义规格，由编译器内 LLM 补实现并经 Dafny 核验
Published Sep 21
Evaluated models Claude Fable 5.1 (Claude Code) , GPT 6 Astra (Codex) Abstract 无歧义规格加验证器，使 LLM 成为可丢弃代码的编译阶段。Djinnlang 让程序员只写规格，把 LLM 放进编译器，并用 Dafny 验证器加上无歧义约束钉住语义。
提出 DriveMCP 框架，将感知、交规检索与车辆遥测接成可审计驾驶辅助层
Published Sep 15 Abstract DriveMCP 用可审计专家工具和 RSS/TTC 仲裁做驾驶辅助，作者称违章与超速低于三个 VLM 基线。DriveMCP 是面向高级驾驶辅助的模块化智能体框架，把感知、合规、车辆状态和安全仲裁拆开并留下审计轨迹。
提出评估合同，检验合规监测数据能否支持比较性安全主张
Published Sep 12 Abstract 比较主张要先对齐能力、结果、暴露、领域、采集和对照。作者给出的是评测效度立场：部署后的运行数据要支持比较主张，必须先写明测量与主张如何对齐。
提出双缺口框架，统一智能体软件工程中的奖励投机与幻觉
Published Sep 11 Abstract 双缺口解释内环为何会放行部署后不可接受的实现，外环用现实证据持续修订 R、M 与 E。Reality Is the Final Verifier 用 two-gap framework 解释智能体软件工程的主要失败，并主张用外层保证环持续收窄缺口，而不是试图在部署前证明缺口已关闭。
提出 AgentRewind，支持长程 Agent 回退对齐检查点并继续执行
Published Aug 14
Evaluated models GPT-5.4 , GPT-5.4 mini , Qwen3.7-Max and others7 You have reached the end