Research
In 3 model conditions, local attack success was frequently 90% or more, but only 7.1% to 100.0% of them changed the task result.
arxiv.orgClaimed, not confirmed
Research
Across eight LLMs, the mean Final-State Error Rate was 0.649 with cross-task replay.
arxiv.orgClaimed, not confirmed
Research
The third agent in a chain removes more than half of the change. The trace of each agent does not show the attack.
arxiv.orgClaimed, not confirmed
Research
GPT Pro, Claude Opus and Kimi came near human level, but large binaries fill the context window fast.
arxiv.org
Research
In the Bemula tests, a system left the data open to extraction by basic attacks or removed much more than the user wanted.
arxiv.org
Security
The RECONS sanitizer cut the remaining disclosure from 96.7% to 29.25% and kept 94.1% of approved disclosures.
arxiv.org
Research
Leakage increases by a maximum of 3 times from 1 turn to 6 turns.
arxiv.orgClaimed, not confirmed
Research
With DeepSeek Flash the score went from 0.825 to 0.920, and with Kimi it went from 0.782 to 0.916.
arxiv.org
Security
The skill scanners in the test find only some of the attacks.
arxiv.orgClaimed, not confirmed
Security
If the agent writes structured records of user approvals, the rate increases to 83.0%.
arxiv.orgClaimed, not confirmed
Research
No agent can resist the incorrect claims in more than 27.4% of the tests.
arxiv.orgClaimed, not confirmed
Benchmarks
With GPU energy included, agent workflows use 0.4 to 26.48 times the energy of linear workflows.
arxiv.orgClaimed, not confirmed