Overview

AI agent safety asks how to keep systems that plan over multiple steps and use tools, memory, or other agents within authorized and harmless bounds. Researchers test computer-use, coding, web, and embodied agents with prompt-injection, misuse, and long-horizon trajectory benchmarks, measuring executed effects as well as final answers. Approaches include red-teaming and monitoring, safety fine-tuning and refusal training, and runtime controls such as least-privilege access, pre-execution policy gates, sandboxing, human approval, and formal verification. A central challenge is that safety can fail through ambiguous goals, changing context, tool or agent interactions, and pressure over time, while stronger restrictions can block legitimate tasks and assurances may not transfer to deployment.

Latest papers

CardsList

326 papers47 papers in the last four weeks, up 68% on the four weeks before. 0.3% of all new papers.

  1. I-HITL: Inalienable Human-in-the-Loop

    Oct 26, 2026Samuel Breckenridge, Dani Vilardell, Wenhao Wang +2Human-in-the-Loop AIAI Agent Safety

  2. ShutdownMod: Turning Any Trajectory into a Shutdown Evaluation

    Oct 26, 2026Param Biyani, Sebastien Luyasu, Cedric Potvliege +3AI Agent SafetyAI Agent Evaluation

  3. V3^3AST-Bench: Verifiable, Valid, and Versatile Safety Evaluation for Coding Agents

    Oct 26, 2026Weitao Feng, Hengheng Xiong, Zihao Zeng +6AI Agent SafetyAI Agent Safety Benchmarks

  4. A Three-Pillar Governance Framework for Safe and Trustworthy AI Agents

    Oct 21, 2026Edward C. Cheng, Jeshua Cheng, Alice SiuAI Agent GovernanceAI Agent Safety

  5. Proof-Carrying Contracts: Commitments AI Agents Cannot Break

    Oct 20, 2026Carlo Ciliberto, Alessandro Rudi, Enrico TassiRuntime Enforcement for AI AgentsAI Agent Safety

  6. CAPSafe: A Benchmark for Contextual Action and Plan Safety Reasoning in Embodied Agents

    Oct 20, 2026Youmna Farag, Svetlana Stoyanchev, Simon Keizer +2AI Agent SafetyAI Agent Safety Benchmarks

  7. Assessing the Empirical Evidence for Loss of Control from Agentic General-Purpose AI

    Oct 18, 2026Risto Uuk, Santeri Koivula, Lorenzo Pacchiardi +3AI Agent SafetyAI Safety

  8. Over-Defense in Coding Agents Begins at Silent Forks

    Oct 18, 2026Hanjun Luo, Xuecheng Liu, Xiucheng Zhang +5AI Coding AgentsRL for Code Generation

  9. How Intervention History Changes AI Agent Sabotage on Subsequent Tasks

    Oct 17, 2026Daniel Saeedi, Amirali AghazadehAI Agent SafetyAI Safety Evaluation

  10. Defending Against Dormant Poisoning Attacks Across Language and Multimodal Agents

    Oct 17, 2026Wonjun Lee, Vaidehi Patil, Zaid Khan +4AI Agent SafetyBackdoor Defense in LLMs

  11. Red-Teaming Multi-Agent Attacks for Loss-of-Control Risks

    Oct 16, 2026John Kitaoka, Thao Amelia Pham, Carlos Rafael Giudice +1AI Agent SafetyMulti-Agent System Security

  12. The Self-Improvement Problem

    Oct 15, 2026Brian B. Moser, Stanislav Frolov, Tobias C. Nauen +2Self-Improving AgentsRecursive Self-Improvement

  13. StepSafe: Learning Timely Intervention with Context-Aware Safety Reasoning

    Oct 14, 2026Siyi Gu, Kunhan Gao, Chao Peter Yang +3AI Agent SafetyLLM Agent Safety

  14. AgentStripes: An Evidence-Graded Maturity Model for AI Agents

    Oct 13, 2026Nutan Kumar Naik, Vijay Prasad Poudel, Aditya Kumar Saroj +2AI Agent EvaluationAI Agent Auditing

  15. Towards Safe Autonomy for Computer Use

    Oct 13, 2026Dominik Seip, Bartol Markovinović, Matthias HeinComputer-Use Agent SafetyAI Agent Safety

  16. Jev-Guard: Fast Routing and Auditing Agent Actions over Editable Policy Trees

    Oct 13, 2026Wenbin Hu, Huihao Jing, Haochen Shi +9LLM GuardrailsAI Agent Safety

  17. SWE-MISBEHAVIOR: Benchmarking and Mitigating Boundary Violations in Software Coding Agents

    Oct 13, 2026Do Xuan Trong, Duc Anh Nguyen, Do Xuan Long +12AI Coding AgentsAI Agent Safety

  18. LatentRiskBench: Measuring State-Dependent Risks in Enterprise Agents

    Oct 13, 2026Jingyue Cong, Estrid He, Zhuang Li +5AI Agent SafetyAI Safety Evaluation

  19. Agency as a New Organizing Abstraction for Computer Science

    Oct 12, 2026Ian FosterAgentic AIAI Agent Reliability

  20. agent-risk: Risk Assessment for Changes to AI Agents

    Oct 12, 2026Yue Zhao, Zixiang Xu, Angela Huyue Zhang +2AI Risk ManagementAI Agent Safety

  21. Computational Reflective Equilibrium for Agentic AI: A Rawlsian Alignment Scaffold for Governance

    Oct 12, 2026Quanyan ZhuAI Agent GovernanceAI Alignment

  22. MedHarnessBench: A Unified Benchmark for Healthcare Agent Evaluation

    Oct 11, 2026Rui Tang, Hongqiu WangAI Agent EvaluationAI Agent Benchmarks

  23. EAIR: Interaction Risks in Enterprise LLM Multi-Agent Systems

    Oct 10, 2026Yuchen Ma, Swadheen Shukla, Paulo Salem +5Enterprise AI AgentsMulti-Agent LLM Systems

  24. Ecology of AI Agents: Collaboration Creates a Population Threshold for Takeoff

    Oct 8, 2026Erin Crawley, Hidenori TanakaAI Agent SafetyMulti-Agent Collaboration

  25. AI Safety Considerations for Agents With Limited Time to Act

    Oct 7, 2026Leo Zeitler, Jack Richings, Victoria NocklesAI Agent SafetyAI Safety

  26. RT-Safe: Benchmarking Agent Safety in Real-Time Embodied Environment

    Oct 7, 2026Tianruo Rose Xu, Jiawei Ren, Yichi Yang +2AI Agent SafetySafe Robot Navigation

  27. SpecGuard: Proving a Task Is Broken Before the Agent Cheats

    Oct 6, 2026Param Biyani, Krishnamurthy DvijothamAI Agent SafetySoftware Engineering Agents

  28. Learning to Report Unsafe Tasks in a Multi-Agent Game

    Oct 6, 2026Avyay M. Casheekar, Hariganesh TangiralaAI Agent SafetyMulti-Agent Systems

  29. Toward Evidence-Driven Human-Agent-Robot Teaming for Earth-Independent Anomaly Triage

    Oct 6, 2026Ignacio G Lopez-Francos, Alexis Gallagher, Samira ShalalHuman-Robot CollaborationSpace Robotics