Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 305 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出义务识别基准 ObligationBench，并训练护栏识别 Agent 未履行的安全义务
Published Oct 8
Evaluated models ObligationGuard , Claude-Opus-4.8 , GPT-5.6-Sol and others17 Abstract 义务是护栏缺口。作者认为编码智能体的安全不能只靠拦截禁止动作，还要找出终止时仍未做的安全关键动作，并将其称为义务。
提出检索可采纳性核验框架，评测记忆智能体的记录资格与披露
Published Oct 6
Evaluated models DeepSeek V4 Pro , Gemini 3.6 Flash , GPT-5.6 Luna and others7 Abstract 作者用三值可采纳性和匹配召回界审计长时记忆检索，并分开报告支持、资格与披露。这是一套长时记忆检索的可采纳性核验协议，用来分开检查候选支持、资格、提示词暴露和答案披露，而不是提出新的检索算法。 。
提出 AMU 按推导图门控企业 Agent 共享记忆的列级访问
Published Oct 6 Abstract 在完整血缘下，AMU 按列权限放行缓存，并标出同名 KPI 冲突。AMU 用列级推导门控共享记忆，拦截经缓存流出的无权敏感列，并标出同名 KPI 的定义冲突。
提出 AgentPrivArena 与运行时审计，评测 Agent 轨迹级隐私泄露
Published Oct 5
Evaluated models GPT-5.4 , DeepSeek-V4-Pro , Kimi-K2.6 and others6 发布 OVERACT 衡量工具智能体主动越权取数并评测 SELFAUDIT
Published Oct 1
Evaluated models Qwen3.6-Flash , Qwen3.6-Plus , Qwen3.7-Max and others7 Abstract 七模型普遍超额调用。七个来自四个家族的工具调用模型，在保守的字面授权准则下会检索超出请求的私人数据。作者把该行为称为 proactive over-authorization，用 OVERACT 做无 LLM 评审的测量，并用 SELFAUDIT 做不依赖 oracle 的执行前过滤。
评测容器、权限规则与沙箱能否区分编译器与编码 Agent 的文件读取
Published Sep 29 Abstract 此 harness 表达不了编译器可读而智能体不可读，五条路径两边都不覆盖。作者在物理流求解器上检查一套编码智能体配置：编译器必须读本组材料与反应模型，这些字节又不得进入模型上下文或离开本机的记录。
用 RevLeakBench 测量 LLM 交付物修订痕迹的无意泄露
Published Sep 28
Evaluated models GPT-5.6 , GPT-5.5 , DeepSeek-V4-Pro and others6 Abstract 修订痕迹让撤回项重新进入交付物。修订痕迹 指模型按要求删掉或换掉一项后，又在交代这次修改时把它写进给第三方的交付物。
构建 AGENTTELL 基准，测量浏览器 Agent 的行为侧信道隐私泄露
Published Sep 27
Evaluated models Claude Sonnet 5 , Gemini 3.7 Flash , GPT-5.6 Luna and others6 Abstract 论文评估了浏览器智能体的行为侧信道泄露风险，并基于近万次会话提供了评测数据。
提出 AuthBench 评测编码 Agent 最小权限，并验证充足性-紧缩性分解
Published May 14
Evaluated models GPT-5 , GPT-5.3-Codex , GPT-5.4 and others9 Abstract 论文提出权限边界推断基准与两阶段分解方法，有效降低安全暴露。本文研究代码智能体在执行终端任务前自主推断最小文件权限边界的能力。
You have reached the end