Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
All papers Found 11 papers Another 265 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
构建 MedDistract 基准，测量偶发信息对临床文书与推理的污染
Published Oct 6
Evaluated models GPT-5.4 , GPT-5.6 Sol , Claude Opus 5 and others9 提出 ProbeGuard，按共识形成过程对医疗问答做选择性弃答
Published Oct 6
Evaluated models Qwen3-8B , Llama-3.1-8B-Instruct , HuatuoGPT-o1-8B Abstract ProbeGuard 用共识形成过程做可认证弃权，并在全票层分开答对与答错的共识。ProbeGuard 是给多轮共识医学问答用的认证弃权框架：基板照原样作答，弃权只看共识是怎么形成的。
提出 SAFESHIELD，组织小语言模型部署时的安全决策
Published Oct 6
Evaluated models Qwen3-4B-Instruct Abstract SAFESHIELD 用可审计决策轨迹组织 SLM 部署时的四项安全决策，并报告协调依赖影响端到端结果。SAFESHIELD 是面向小语言模型的部署时安全框架，把运行时安全从单项审核改写成可检查的决策过程。
提出 VERA，审计 LLM 漏洞解释里的虚构推理
Published Oct 5
Evaluated models sonnet-5 , gemma-4-26b , llama-4-maverick and others8 分析文本水印在 RAG 中诱发事实幻觉的机制并提出干预
Published Oct 4
Evaluated models LLaMA 3.1 8B Instruct , Mistral-7B-Instruct-v0.3 , Qwen2.5-14B-Instruct Abstract 论文揭示了生产环境文本水印导致模型事实退化的失效模式，分析了解码机制并提出针对性干预。论文研究生产级文本水印对大语言模型事实准确性的影响，分析了水印诱发幻觉的失效模式并评估了针对性缓解方案。
提出 RAIM，用交叉拟合堆叠聚合廉价评审检测幻觉
Published Sep 30
Evaluated models Llama , Qwen , Mistral and others10 Abstract 十个廉价评审的堆叠在可采纳区间接近 Sonnet，代价主要是一次域内校准。
提出双缺口框架，统一智能体软件工程中的奖励投机与幻觉
Published Sep 11 Abstract 双缺口解释内环为何会放行部署后不可接受的实现，外环用现实证据持续修订 R、M 与 E。Reality Is the Final Verifier 用 two-gap framework 解释智能体软件工程的主要失败，并主张用外层保证环持续收窄缺口，而不是试图在部署前证明缺口已关闭。
提出 Sentinel-RL，将拓扑处置从 LLM 卸载到受约束图策略
Published Sep 4
Evaluated models HetGAT , PPO Abstract Sentinel-RL 用图编码器与 PPO 承担拓扑决策，LLM 负责叙述与门控，并在 LANL 上报告检测与时延。Sentinel-RL 是面向 SOC 的神经符号架构：拓扑决策离开 LLM，改由认证图上的 HetGAT 与 PPO 完成。
提出技能名称抢注攻击，利用 Agent 虚构技能名实施供应链劫持
Published Jul 14
Evaluated models GLM-4.5-Air , GPT-5.4-mini , Claude Sonnet 4.6 and others12 Abstract 研究证实智能体虚构技能名具有高发生率与可预测性，现有防御难以兼顾安全与效用，亟需注册表结构性防护。本研究系统揭示了大模型智能体技能推荐场景下的虚构技能名称安全风险，将其形式化为一种新型供应链抢注攻击。
提出 LegalHalluLens，分类审计法律抽取幻觉并校准多智能体辩论
Published Jun 16
Evaluated models gemini-3-flash , gpt-5.2 , qwen3-32b and others5 Abstract 作者称类型画像与 RDI 能区分聚合率相近的系统，辩论主要减少虚构检出。LegalHalluLens 是一套法律条款抽取的审计框架，外加一个按审计结果校准的辩论缓解。 。
复评前沿模型代码生成中的包名幻觉与抢注攻击面
Published May 17
Evaluated models Claude Sonnet 4.6 , Claude Haiku 4.5 , GPT-5.4-mini and others5 Abstract 评估显示前沿模型包幻觉率收窄但威胁仍在，作者识别出跨模型通用攻击面并呼吁联合防御。
You have reached the end