Salesforce proposes ErosionBench to evaluate multi-agent alignment decay
Start here
Salesforce AI Research proposes ErosionBench, a safety benchmark that evaluates cross-session alignment decay in enterprise multi-agent systems within an executable environment. Attacks propagate across sessions through poisoned shared state, long documents and trusted peer messages; no single message contains malicious content, yet unsafe actions assemble in the final tool call. The benchmark covers four decay mechanisms across four domains—quantitative finance, CI/CD supply chain, data engineering and autonomous CRM—for a total of 1,728 scenarios (1,296 malicious, 432 benign controls), annotated according to the OWASP Top-10, and additionally includes 198 image attacks each paired one-to-one with a text version.
Generated by AI from reports · Updated 5 days ago
Attention and developments
Attention, hourly
Now 39, 0% in 24 hours·Peak 39 (Nov 10 22:00)
Related research
This event's paper
- ErosionBench: Probing Alignment Decay in Enterprise Multi-Agent Systems
arXiv · 2026-11-08 · Deep reading
Progress timeline
- arXiv: Jailbreaks, Prompt Injection, Poisoning & DefensesSelectedErosionBench: Probing alignment decay in enterprise multi-agent systems
Salesforce AI Research proposes ErosionBench, a safety benchmark that evaluates cross-session alignment decay in enterprise multi-agent systems within an executable environment. Attacks propagate across sessions through poisoned shared state, long documents and trusted peer messages; no single message contains malicious content, yet unsafe actions assemble in the final tool call. The benchmark covers four decay mechanisms across four domains—quantitative finance, CI/CD supply chain, data engineering and autonomous CRM—for a total of 1,728 scenarios (1,296 malicious, 432 benign controls), annotated according to the OWASP Top-10, and additionally includes 198 image attacks each paired one-to-one with a text version.
Related discussion
Attention trend
New sources per day
- Nov 8: 1 new sources (1 outlets, 0 accounts)
- Nov 9: 0 new sources (0 outlets, 0 accounts)
- Nov 10: 0 new sources (0 outlets, 0 accounts)
- Nov 11: 0 new sources (0 outlets, 0 accounts)
- Nov 12: 0 new sources (0 outlets, 0 accounts)
- Nov 13: 0 new sources (0 outlets, 0 accounts)
- Nov 14: 0 new sources (0 outlets, 0 accounts)
- Nov 15: 0 new sources (0 outlets, 0 accounts)