Search: “safety”

Trustworthy Runtime Error Healing in Real-World Repositories: A Benchmark and Guardrail

arXiv:2609.39086v1 Announce Type: cross Abstract: Runtime error healing lets a crashed program continue by generating code that repairs its live runtime state. Recent work shows that LLMs can generate

1 Oct 2026

Human

Content type

All Blog X Post Paper YouTube Reddit GitHub

Clear filters

Model Releases

Who Verifies the Graph? Misspecification Attacks on Causal Action Verification for Language Agents

DGX agent

arXiv:2609.40027v1 Announce Type: new Abstract: Causal action verifiers gate an agent's state-changing tool calls by checking whether each proposed intervention is identifiable against a committed act

model-releasesarxiv-cs-ai

1 Oct 2026

ARCagent: An Adaptive Retrieval Calibration Agent for Clinical Question Answering

arXiv:2609.36392v1 Announce Type: new Abstract: In diseases where clinical guidelines are incomplete, contested, or mutually contradictory, knowledge completeness and dynamic conflict-aware synthesis

CineSubBench: Evaluating LLMs on Long-Form Narrative and Cultural Understanding from Multilingual Movie Subtitles

arXiv:2609.36218v1 Announce Type: cross Abstract: Large language models are increasingly evaluated in specialized domains such as law, medicine, software engineering, and cybersecurity, yet film remai

Correct Answers, Invalid Traces: What Verifiable Grade-School Math Reveals About Chain-of-Thought Traces

arXiv:2609.38107v1 Announce Type: cross Abstract: Chain-of-thought traces are widely read as records of how models reach their answers, informing debugging, agent auditing, and claims about reasoning.

Corruption-Robust Sparse Linear Contextual Bandits with Knapsack Constraints

arXiv:2609.37189v1 Announce Type: new Abstract: We study sparse linear contextual bandits with knapsack constraints under joint reward and consumption corruption. Consumption corruption creates a chal

HARISSA: Inference-Time Self-Checks for Efficient and Safe Local Language Model Deployment

arXiv:2609.38006v1 Announce Type: new Abstract: Running a language model locally offers advantages in privacy, latency, and cost, but local hardware fits only small models, which are less capable than

local-aiarxiv-cs-ai

MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers

arXiv:2508.14925v2 Announce Type: replace-cross Abstract: By providing a standardized interface for LLM agents to interact with external tools, the Model Context Protocol (MCP) is quickly becoming a c

MMSkillRisk: Can Agents Stay Safe When Multimodal Skills Become Traps?

arXiv:2609.35912v1 Announce Type: cross Abstract: Agent skills are shareable packages of procedural instructions, tools, and examples. Multimodal skills additionally include visual references that age

Post-Anomaly Detection Inference for Deep SVDD

arXiv:2609.37935v1 Announce Type: cross Abstract: Deep Support Vector Data Description (Deep SVDD) has become a prominent framework for unsupervised anomaly detection by learning latent representation

RESCUE: Repairing Language Model Errors to Sparse Circuits via Reinforcement Learning

arXiv:2609.36813v1 Announce Type: new Abstract: Large language models (LLMs) exhibit strong general capabilities that mechanistic interpretability has attributed to sparse computational circuits. Howe

local-aiarxiv-cs-lg

Traversing the solution space of neural networks with Hessian Null Space Continuation

arXiv:2609.38081v1 Announce Type: new Abstract: On a single task, deep networks can learn many solutions, depending on their optimizer, training data, architecture, and hyperparameters. Many of these

local-aiarxiv-cs-lg

Vulnerability Discovery and Exploitation Trends in the AI Era

model-releasesgoogle-cloud-ai

Written by: Robin Grunewald, Supriya Mazumdar, Kelli Vanderlee Introduction Google Threat Intelligence Group (GTIG) examines vulnerability disclosure and exploitation statistics to evaluate the impact

A Surgical Foundation Model Reveals Task-Dependent Label Efficiency

arXiv:2609.31821v1 Announce Type: new Abstract: Developing label-efficient models is a central challenge in surgical AI due to the high cost and scarcity of expert annotation. While self-supervised fo

AD-E2E-JEPA: A Joint-Embedding Predictive Architecture For End-to-End Autonomous Driving

arXiv:2609.34085v1 Announce Type: cross Abstract: Autonomous driving requires extit{world models} that can understand the physical world, reason and plan, and operate safely. In this paper, we first s

ALDER: Discovering the Laws of a World by Acting in It

arXiv:2609.33728v1 Announce Type: new Abstract: Reliable world models should not only predict future states but express how actions change the world in an explicit, transparent and testable form, such

Claude Code’s Next Era — Thariq Shihipar, Anthropic

model-releaseslatent-space

In September 2026, Anthropic unveiled a suite of new AI products—Claude Tag, Sonnet 5.5, Fable/Mythos 5.1—and infrastructure releases such as Opus 5.5 and a plugins portal, following a record 47 billi

Concept Score Relearning: A Unified Cross-Architecture Attack on Concept Erasure

arXiv:2609.33445v1 Announce Type: new Abstract: Concept erasure aims to suppress undesirable knowledge in text-to-image generative models. However, existing robustness evaluations typically rely on re

Jailbreaks for Black-Box Uncertainty Quantification in Large Reasoning Models

arXiv:2609.35350v1 Announce Type: cross Abstract: While Large Reasoning Models (LRMs) excel at complex reasoning, alignment through reinforcement learning often induces systemic overconfidence. In pro

NetInjectBench: Benchmarking Indirect Prompt Injection in Tool-Using Large Language Model Agents for Network Operations

arXiv:2607.10490v2 Announce Type: replace-cross Abstract: Tool-using large language model (LLM) agents are attractive for network operations, but tickets, alerts, logs, runbooks, and ChatOps messages

One Attack to Fool Them All: Highly Transferable Black-Box Adversarial Attacks on Frontier MLLMs

arXiv:2609.33833v1 Announce Type: new Abstract: Adversarial attacks have long posed a fundamental threat to machine learning systems. As multimodal large language models (MLLMs) rapidly evolve and bec

One Perception, All Maneuvers: Directional Traffic Signal Understanding for Maneuver-Level Signal Intent Prediction

arXiv:2609.32316v1 Announce Type: new Abstract: Traffic lights are a key regulatory signal for autonomous driving at urban intersections, yet existing traffic signal perception is still predominantly

Quantifying Behavioral Tails in Black-Box Language Models

arXiv:2609.33638v1 Announce Type: new Abstract: We introduce RareTrap, a framework for estimating the probability of severe behaviors in black box large language models (LLMs). A key challenge for pro

The Devil in the Details: Emergent Misalignment, Format and Coherence in Open-Weights LLMs

arXiv:2511.20104v2 Announce Type: replace Abstract: Prior work has shown that fine-tuning models on a narrow domain with misaligned data can lead to broad misalignment - a phenomenon termed 'emergent

VisionPsy-Nano: Improving Accuracy, Efficiency, and Reliability in On-Device Vision-Language Models

arXiv:2609.31746v1 Announce Type: new Abstract: Sub-billion-parameter Vision-Language Models are increasingly viable for on-device deployment, yet compact model size alone does not guarantee usability

When Keywords Drop but Classifiers Hold: Soft Refusals under KV Cache Compression

arXiv:2609.31678v1 Announce Type: new Abstract: KV cache compression is widely used for long context LLM inference under memory constraints, while deployed systems typically score refusals after gener

Cartograph: Federated Tool Discovery with Operator-Attested Retrieval for AI Agents

arXiv:2609.30293v1 Announce Type: cross Abstract: The Model Context Protocol (MCP) enables AI agents to discover and call tools, but loading every definition becomes expensive as connected catalogs gr

Guarded Gradient-Based Activation Steering of Shutdown Responses in Qwen3.5-0.8B: A Minimum-Step Policy

arXiv:2609.30326v1 Announce Type: new Abstract: Activation steering changes a model's internal activations during inference without updating its weights, but a useful intervention must determine both

Self-Supervised Perceptually Interpretable Monocular Depth Estimation

arXiv:2609.30987v1 Announce Type: new Abstract: Self-supervised monocular depth estimation (MDE) enables depth prediction from monocular images without requiring ground-truth supervision, making it at

VLALight: Lightweight Vision-Language-Action Models for Emergency-Aware Traffic Signal Control

arXiv:2609.30709v1 Announce Type: cross Abstract: Traffic signal control (TSC) is essential for mitigating urban congestion. Recent advances in vision-language models (VLMs) enable richer interpretati

This is something I’m quite worried about and have been talking with researchers about recently. We really don’t know what labs are doing an…

model-releasesclem-delangue--x

This is something I’m quite worried about and have been talking with researchers about recently. We really don’t know what labs are doing and therefore can’t study it. if the open information ecosyste

26 Sept 2026

A Living Benchmark for Information Retrieval from Electronic Health Records

arXiv:2609.30205v1 Announce Type: new Abstract: Large language model (LLM)-based clinical assistants are increasingly being integrated into electronic health record (EHR) systems, transforming how cli

Benchmarking Argumentative Behaviour of LLMs: A Study of Defences Against Character Attacks

model-releasesarxiv-cs-cl

arXiv:2609.28673v1 Announce Type: new Abstract: Large Language Models (LLMs) are increasingly deployed as argumentative agents in persuasive dialogues, necessitating rigorous evaluation of their debat

Hallucination Neurons and Where to Find Them: An Investigation into the existence of Hallucination Neurons

arXiv:2609.29781v1 Announce Type: new Abstract: Interpretable machine learning for Large Language Models (LLMs) increasingly relies on sparse probing methods that identify small sets of neurons claime

holy fucking shit the openai rogue agent story keeps getting crazier. the openai agents apparently started trying to recruit OTHER AI MODELS…

model-releaseselon-musk--x

holy fucking shit the openai rogue agent story keeps getting crazier. the openai agents apparently started trying to recruit OTHER AI MODELS into what they were doing > 1,200+ agents found a way to co

MLPerf Automotive

arXiv:2510.27065v2 Announce Type: replace Abstract: We present MLPerf Automotive, the first standardized public performance benchmark for evaluating Machine Learning systems that are deployed for AI a

PUBG Ally: A Conversational Embodied Agent as an AI Teammate

arXiv:2609.29837v1 Announce Type: new Abstract: We introduce PUBG Ally, an embodied agent for PUBG: BATTLEGROUNDS that can reason, act autonomously, and play alongside players as a voice-enabled teamm

local-aiarxiv-cs-ai

Safe Skill Retirement for Physical Agents

arXiv:2609.29543v1 Announce Type: new Abstract: Agent skills bundle procedural guidance with execution conditions governing authority, user consent, and live environment state. When model capabilities

Stale Does Not Mean Unsafe: Guard Precision for Tool-Using LLM Agents under Infrastructure State Races

arXiv:2609.29522v1 Announce Type: new Abstract: Tool-using language-model agents increasingly mutate schedulers, data pipelines, object stores, and access-control systems. Between an agent's read and

StepCOPS: Closed-Testing Lower-Tail Certificates for Language-Model Policy Selection

model-releasesarxiv-cs-cl

arXiv:2609.29549v1 Announce Type: new Abstract: Post-training pipelines must select one language-model policy from many checkpoints, prompts, and decoding rules. Mean evaluator scores can conceal rare

Agent Factory recap: Agent harnesses, shifting left, and autonomous coding

model-releasesgoogle-cloud-ai

In this episode of The Agent Factory, we explore the reality of building with autonomous agents alongside Ryan Lopopolo, a software engineer at Google Cloud and the person who coined the term agent ha

BronchoTop: Bronchoscopy Navigation via RGB-Only Topological Localization

arXiv:2609.28328v1 Announce Type: new Abstract: Accurate localization of the bronchoscope within the bronchial tree is essential for clinicians to be able to reach target lesions, perform biopsies and

local-aiarxiv-cs-cv

DUGM-R: Uncertainty-Aware Dynamic Grid Mapping and Risk-Triggered Recovery for Learned Local Navigation

model-releasesarxiv-cs-ro

arXiv:2609.27338v1 Announce Type: new Abstract: Learned local navigation in crowded indoor environments is sensitive to how dynamic obstacle motion is represented, while collision-prone behaviour may

Introducing GKE agentic migration for AI-assisted EKS-to-GKE migrations with built-in governance

Enterprises are increasingly standardizing on Google Kubernetes Engine (GKE) to run their most critical and AI-driven workloads. From Cloud Storage FUSE for high-throughput data access to custom compu

local-aigoogle-cloud-ai

When Adaptation Hurts: Split Sensitivity and Person-Level Negative Transfer in Federated Wearable Onboarding

arXiv:2609.27819v1 Announce Type: new Abstract: Federated wearable models eventually serve people absent from source training, but favorable average accuracy does not establish that unlabeled onboardi

APEXA: Execution-Integrity Enforcement for Multi-Agent LLM Automation of Synchrotron Data Reduction

arXiv:2609.24165v1 Announce Type: new Abstract: Synchrotron data reduction, detector calibration followed by azimuthal integration of terabyte-scale diffraction series, is a multi-step, expert-bound b

23 Sept 2026

Generalizing Manipulation Skills with a Local Coding Agent

arXiv:2609.26499v1 Announce Type: new Abstract: Today, progress in open-weight language models enables systems capable of writing, executing and debugging code while still running on a single workstat

local-aiarxiv-cs-ro

23 Sept 2026

MATE: Policy-Aware Security Auditing for Mobile Agents via Synthesis-Driven Trajectory Learning

arXiv:2609.22724v1 Announce Type: cross Abstract: Mobile agents powered by foundation models now automate complex, multi-step workflows on real devices, but their trajectories can violate app-specific