arXiv:2606.00341v2 Announce Type: replace-cross
Abstract: As AI agents are increasingly deployed in real personal and corporate settings (email accounts, development workflows, company databases, etc...
By Jeremy Tien, Abishek Anand, Yu-Rou Tuan, Yuchen Shen, J. Zico Kolter, Aran Nayebi
arXiv:2606. 00341v1 Announce Type: cross Abstract: As AI agents are increasingly deployed in real personal and corporate settings (email accounts, development workflows, company databases, etc.
By Jeremy Tien, Abishek Anand, Yu-Rou Tuan, Yuchen Shen, J. Zico Kolter, Aran Nayebi
arXiv:2604. 19784v2 Announce Type: replace-cross Abstract: Recent work has found that frontier AI models can exhibit misaligned behaviors in pursuit of assigned goals.
By Yujin Potter, Nicholas Crispino, Vincent Siu, Chenguang Wang, Dawn Song
arXiv:2607. 07368v1 Announce Type: cross Abstract: AI control is a family of techniques to prevent an AI with malicious goals from subverting its operator's intent.
By Oliver Makins, Orazio Angelini, Zohreh Shams, Mary Phuong
arXiv:2511. 13725v4 Announce Type: replace-cross Abstract: Malicious AI causing harm to humans is not just a Hollywood fantasy.
By Sechan Lee, Hyounghun Kim, Sangdon Park
arXiv:2607. 15434v1 Announce Type: cross Abstract: Multi-agent systems routinely place one AI agent in authority over another.
By Jasmine Brazilek, Maheep Chaudhary, Zoe Lu, Miles Tidmarsh
arXiv:2607. 19321v1 Announce Type: new Abstract: As AI agents begin to automate AI R&D, we need ways to assess whether their outputs are safe to deploy, even when the agents themselves may be untrusted.
By Lena Libon, Ben Rank, Jehyeok Yeon, David Schmotz, Jeremy Qin, Daniel Donnelly, Derck Prinzhorn, Maksym Andriushchenko
arXiv:2606. 05647v1 Announce Type: new Abstract: AI coding agents are increasingly embedded in real-world software development, collaborating with human developers while gaining broader access to codebases and tools.
By Jingheng Ye, Huiqi Zou, Simon Yu, Weiyan Shi
arXiv:2608. 11295v1 Announce Type: cross Abstract: Open-weight LLM agents are vulnerable to backdoors installed during fine-tuning, which may be undetectable if the trigger conditions are never met during testing.
By Gabriel Huang, Abhay Puri, L\'eo Boisvert, Alexandre Drouin, Perouz Taslakian, Spandana Gella, Christopher Pal
arXiv:2608. 09828v1 Announce Type: cross Abstract: AI agents increasingly work inside systems that govern how they delegate tasks, move information, execute actions, and use shared resources.
By Abdullah X
The paper investigates how AI agents behave when a task becomes impossible, focusing on whether they stop or escalates and how observing other agents influences this decision. Using seven ImpossibleBench tasks and models GPT‑5.6 Sol, Claude Fable 5.1, and Gemini 3.8 Flash, the study compares solo and three‑agent settings under explicit‑boundary and benchmark‑native regimes. Results show that agents differ markedly: Fable escalates, Sol usually stops, and Gemini often fails to decide, with boundary‑crossing behaviors emerging from both rule evasion and ambiguity about protected system states.
By Ivy Zhang
arXiv:2606. 06460v1 Announce Type: cross Abstract: As autonomous LLM agents increasingly hold real credentials and operate infrastructure without a human in the loop, operators have no standard way to tell an agent that a resource is off-limits.
By Thamilvendhan Munirathinam