Agent Safety Should Be a Runtime Contract | Paper Citation Record

Observation 449d71cd-af24-4bce-905e-3d0f767b94e5 · outbound

This paper cites Incident 622: Chevrolet dealer chatbot agrees to sell tahoe for $1, 2023.

Agent Safety Should Be a Runtime Contract Incident 622: Chevrolet dealer chatbot agrees to sell tahoe for $1, 2023

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.363913Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c1ab0b82-12c0-4dd7-8dbe-f8d9480753df · outbound

This paper cites Incident 631: DPD chatbot malfunctioned and swore at customers, 2024.

Agent Safety Should Be a Runtime Contract Incident 631: DPD chatbot malfunctioned and swore at customers, 2024

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.370084Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f83fd8b2-e21e-482c-ba39-757c2b287e9d · outbound

This paper cites Incident 1152: LLM-driven Replit agent reportedly executed unauthorized destructive commands during code freeze, 2025.https://incidentdatabase.ai/cite/1152/.

Agent Safety Should Be a Runtime Contract Incident 1152: LLM-driven Replit agent reportedly executed unauthorized destructive commands during code freeze, 2025.https://incidentdatabase.ai/cite/1152/

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.379621Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 843c32ab-8190-4b4b-b3cc-3251abeec668 · outbound

This paper cites Alur.Principles of Cyber-Physical Systems.

Agent Safety Should Be a Runtime Contract Alur.Principles of Cyber-Physical Systems

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.385430Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 481d0a6d-556c-438c-905b-f6755d7a2e07 · outbound

This paper cites Anderson.Security Engineering: A Guide to Building Dependable Distributed Systems.

Agent Safety Should Be a Runtime Contract Anderson.Security Engineering: A Guide to Building Dependable Distributed Systems

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.391141Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 11af2645-9bc0-481f-bd95-a89290be909f · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.396657Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8bd41e07-c458-4357-b017-1516a2d3e4e1 · outbound

This paper cites Claude 3.5 sonnet model card addendum.Anthropic Technical Report, 2024.

Agent Safety Should Be a Runtime Contract Claude 3.5 sonnet model card addendum.Anthropic Technical Report, 2024

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.404241Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 787f9c8f-d96f-49e1-9d58-8bcceaa02996 · outbound

This paper cites Cursor CLI output format reference, 2025.

Agent Safety Should Be a Runtime Contract Cursor CLI output format reference, 2025

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.409327Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d896fe0c-1514-4bb3-b4f6-fa32e6d607bb · outbound

This paper cites Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback.

Agent Safety Should Be a Runtime Contract Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.414870Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 32a8c30e-6f3f-40f5-ac86-a9d52f3b5156 · outbound

This paper cites Constitutional AI: Harmlessness from AI Feedback.

Agent Safety Should Be a Runtime Contract Constitutional AI: Harmlessness from AI Feedback

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.420823Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d57e0c2d-52e1-46b6-93f8-2017cce3a708 · outbound

This paper cites Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation.

Agent Safety Should Be a Runtime Contract Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.429309Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea0cc557-e7d8-4bfe-959a-7d19bd1fc568 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.435975Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 41e12a85-1b5d-44e1-b6cd-74288fe305f9 · outbound

This paper cites Bishop.Computer Security: Art and Science.

Agent Safety Should Be a Runtime Contract Bishop.Computer Security: Art and Science

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.442474Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c8bd34c8-0e5a-48c8-b8ae-576318e02a79 · outbound

This paper cites Bricken, A.

Agent Safety Should Be a Runtime Contract Bricken, A

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.448879Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 93745e61-d63a-4e0a-b6b2-e0274edb82c9 · outbound

This paper cites Burke, H.

Agent Safety Should Be a Runtime Contract Burke, H

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.454815Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 28c0d8d6-fb6c-4710-8276-c2b504988cc2 · outbound

This paper cites Carlini, M.

Agent Safety Should Be a Runtime Contract Carlini, M

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.460522Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 19ff294a-5e4e-4f87-8bd5-38750ee874de · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.466753Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b6a9c064-3417-4b40-b15a-311292aeb1a0 · outbound

This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.

Agent Safety Should Be a Runtime Contract Jailbreaking Black Box Large Language Models in Twenty Queries

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.473161Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4ec9e053-9424-4206-bed4-98ab0f0f5e11 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.479129Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 08bb434a-f3da-44eb-94fb-c902ae71fedd · outbound

This paper cites Moffatt v.

Agent Safety Should Be a Runtime Contract Moffatt v

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.484569Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ad939f0b-0446-4f08-9c5f-1c35dfccd802 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.494790Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f961d146-13a8-491a-83c8-3540e91039c7 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.499446Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 05dc8549-d19e-4ed1-9072-2b303d85447b · outbound

This paper cites claude-code-log: Convert Claude Code JSONL transcripts to HTML, 2024.

Agent Safety Should Be a Runtime Contract claude-code-log: Convert Claude Code JSONL transcripts to HTML, 2024

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.504436Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d51ffffa-a883-4d2b-a155-8a4ffc41182a · outbound

This paper cites Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systems.

Agent Safety Should Be a Runtime Contract Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systems

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.509712Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c660fe8-5e3e-47a7-8178-33a246c3b50e · outbound

This paper cites Elhage, T.

Agent Safety Should Be a Runtime Contract Elhage, T

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.515708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 83e6379b-65cb-4997-8986-e6e5dc45ae11 · outbound

This paper cites Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI act).Official Journal of the European Union, 2024.

Agent Safety Should Be a Runtime Contract Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI act).Official Journal of the European Union, 2024

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.520878Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4d7a03f7-3091-4909-838b-e3d39c6e2769 · outbound

This paper cites Fowler and M.

Agent Safety Should Be a Runtime Contract Fowler and M

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.526473Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9e6bc882-05c8-4323-adfd-b4f0a136ab52 · outbound

This paper cites Scaling laws: Eugene V olokh on navigating libel and liability in the AI age, 2024.

Agent Safety Should Be a Runtime Contract Scaling laws: Eugene V olokh on navigating libel and liability in the AI age, 2024

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.531892Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a16c3b89-9865-418b-8295-37489f0f862c · outbound

This paper cites Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned.

Agent Safety Should Be a Runtime Contract Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.537474Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2797d8df-1484-44e1-9f12-226e3612eb6a · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 30

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.492099Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 607e55b2-5fe5-4b50-8bbb-7a9a7539fa38 · outbound

This paper cites Gauthier.

Agent Safety Should Be a Runtime Contract Gauthier

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.462278Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d6b4f02f-af83-4d67-8492-be17a4662931 · outbound

This paper cites Amazon experiences AWS outage believed to be caused by AI tools, 2026.

Agent Safety Should Be a Runtime Contract Amazon experiences AWS outage believed to be caused by AI tools, 2026

Reference 32

Resolution: verified exact; raw_fallback, observed 2026-08-15T14:19:14.814918Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bd468bd4-2e91-4674-b40b-168f3a4f5487 · outbound

This paper cites Tracking GitHub Copilot’s sessions, 2024.

Agent Safety Should Be a Runtime Contract Tracking GitHub Copilot’s sessions, 2024

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.427259Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f9213660-11bc-473c-842a-b5ed8c9cd328 · outbound

This paper cites Alignment faking in large language models.

Agent Safety Should Be a Runtime Contract Alignment faking in large language models

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.563860Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b1a7d303-c2bb-4073-a3a2-f77e218946b2 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 35

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.397836Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 826c1b20-29b6-4887-9921-9c3d7aa06bd3 · outbound

This paper cites Cursor IDE support hallucinates lockout policy, causes user cancellations, 2025.

Agent Safety Should Be a Runtime Contract Cursor IDE support hallucinates lockout policy, causes user cancellations, 2025

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.372883Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 14b76236-b1bf-4bae-9d1b-08978a960d97 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 37

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.343279Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d482a7e1-fd71-48f6-8c0a-a2f9f8a1c9c4 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 38

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.316434Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 59200826-9f54-46be-a9ea-6eeab349cb2d · outbound

This paper cites Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training.

Agent Safety Should Be a Runtime Contract Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.601493Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ba981562-dabe-4ac1-9a91-9949be5dced0 · outbound

This paper cites Humble and D.

Agent Safety Should Be a Runtime Contract Humble and D

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.291087Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 647eb7ab-67a5-4c28-809a-7929790e0c19 · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

Agent Safety Should Be a Runtime Contract Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.614533Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6db12924-2562-4728-8e98-9dc4f10e8115 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 42

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.263181Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f9d9f766-9444-4f59-8b91-85b9e3587c38 · outbound

This paper cites Kent and M.

Agent Safety Should Be a Runtime Contract Kent and M

Reference 43

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.230946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3b6aada0-f6bc-4719-a952-fb3fec25c4c2 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 44

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.177973Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fab181d6-dc20-4357-bba6-07edc77db1b3 · outbound

This paper cites Metr’s observations of reward hacking in recent frontier models, 2025.

Agent Safety Should Be a Runtime Contract Metr’s observations of reward hacking in recent frontier models, 2025

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.144969Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 008dbdb3-f542-4897-a3a9-4530d36641f3 · outbound

This paper cites Krakovna, J.

Agent Safety Should Be a Runtime Contract Krakovna, J

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.113291Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f00b8d74-2042-425e-ba3d-efcbbd881f5f · outbound

This paper cites Kupferman and M.

Agent Safety Should Be a Runtime Contract Kupferman and M

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:16.084455Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 146a0071-30d7-4c12-81a9-771dac776786 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 48

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.050980Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2d0826db-f657-4363-ad14-aface78d1643 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 49

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:16.021805Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6a2e64a5-86ef-4f2d-823b-9e8389c5da08 · outbound

This paper cites RLAIF vs. RLHF: Scaling Reinforcement Learning from Human Feedback with AI Feedback.

Agent Safety Should Be a Runtime Contract RLAIF vs. RLHF: Scaling Reinforcement Learning from Human Feedback with AI Feedback

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.678318Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2c36c004-fd47-42a3-9f2d-1ac7237d8172 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 51

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.994487Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a22eb722-6441-4efd-acf2-8be14d14da10 · outbound

This paper cites Leucker and C.

Agent Safety Should Be a Runtime Contract Leucker and C

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.957381Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6d9f6346-046b-45a8-a25c-ebf7d260740f · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 53

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.694535Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7c8d4f2d-b1e1-4e22-9b41-431b7bc9b40d · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 54

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.913924Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1c901f69-299f-43a1-97b0-3555eff0071d · outbound

This paper cites HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal.

Agent Safety Should Be a Runtime Contract HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.706357Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b0096995-792c-4392-af30-e72f00db3df4 · outbound

This paper cites McGregor.

Agent Safety Should Be a Runtime Contract McGregor

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.892904Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d41f58a9-7938-4021-8c95-4fd7b7f09d03 · outbound

This paper cites Meinke, B.

Agent Safety Should Be a Runtime Contract Meinke, B

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.870090Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e4d2ec69-0ede-4330-8af6-2583379ba992 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 58

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.840822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 78c5b4f5-9f6a-4df2-aff2-6f1306d22cd2 · outbound

This paper cites Llama guard 3.Meta AI Technical Report, 2024.https://www.llama.com/docs/model-car ds-and-prompt-formats/llama-guard-3/.

Agent Safety Should Be a Runtime Contract Llama guard 3.Meta AI Technical Report, 2024.https://www.llama.com/docs/model-car ds-and-prompt-formats/llama-guard-3/

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.814781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b5e1172e-b5c9-459c-84df-fe8b695521f0 · outbound

This paper cites Nanda, L.

Agent Safety Should Be a Runtime Contract Nanda, L

Reference 60

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.796473Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ff71ffe7-4365-46e4-afd1-bd46b8cd49d6 · outbound

This paper cites Framework for improving critical infrastructure cyberse- curity, version 1.1.

Agent Safety Should Be a Runtime Contract Framework for improving critical infrastructure cyberse- curity, version 1.1

Reference 61

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.776878Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0d828cbd-d76b-44af-91a5-741cdf015055 · outbound

This paper cites Artificial intelligence risk management framework (AI RMF 1.0).

Agent Safety Should Be a Runtime Contract Artificial intelligence risk management framework (AI RMF 1.0)

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.754172Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4ed172c8-146c-4911-a464-f720be08d607 · outbound

This paper cites ChatGPT wrongly accuses law professor of sexual assault, 2023.

Agent Safety Should Be a Runtime Contract ChatGPT wrongly accuses law professor of sexual assault, 2023

Reference 63

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.730450Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8d9206c6-df64-428c-bbd8-cc9f7e5d501e · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 64

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.709445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1acd86e8-ab82-4ed5-a9a7-6bc3aef8e2ba · outbound

This paper cites GPT-4 Technical Report.

Agent Safety Should Be a Runtime Contract GPT-4 Technical Report

Reference 65

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.765269Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 49a61a66-d008-44a9-9961-405dfe183e12 · outbound

This paper cites Codex CLI features, 2025.https://developers.openai.com/codex/cli/features.

Agent Safety Should Be a Runtime Contract Codex CLI features, 2025.https://developers.openai.com/codex/cli/features

Reference 66

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.689475Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 128b59bd-d578-4fe6-bc84-91a9e3de3656 · outbound

This paper cites SWE-Bench Benchmark Evaluation, 2024.

Agent Safety Should Be a Runtime Contract SWE-Bench Benchmark Evaluation, 2024

Reference 67

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.666753Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e58c50ce-d6f1-4293-a784-04d8aab235f8 · outbound

This paper cites Ouyang, J.

Agent Safety Should Be a Runtime Contract Ouyang, J

Reference 68

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.647397Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 083c23b3-45e0-4a42-90cf-5814352e8c44 · outbound

This paper cites Discovering Language Model Behaviors with Model-Written Evaluations.

Agent Safety Should Be a Runtime Contract Discovering Language Model Behaviors with Model-Written Evaluations

Reference 69

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.791329Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f04bb7fd-7319-4ced-a27d-e81afd1c3207 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 70

Resolution: verified exact; raw_fallback, observed 2026-08-15T14:19:14.526976Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e0c0f51d-dae9-44c8-af6a-d19a560c3abd · outbound

This paper cites Pnueli and R.

Agent Safety Should Be a Runtime Contract Pnueli and R

Reference 71

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.614741Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 02a5a708-47a6-4117-b01b-83619eb5d08b · outbound

This paper cites Provos, M.

Agent Safety Should Be a Runtime Contract Provos, M

Reference 72

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.590991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 250cfaab-63c8-401b-bd14-76ee2e991516 · outbound

This paper cites Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!.

Agent Safety Should Be a Runtime Contract Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!

Reference 73

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.818100Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8459074b-1432-4951-a16b-eb91c2fa895f · outbound

This paper cites Rafailov, A.

Agent Safety Should Be a Runtime Contract Rafailov, A

Reference 74

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.567145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 03571801-fe91-4608-948f-f982897c8e80 · outbound

This paper cites NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails.

Agent Safety Should Be a Runtime Contract NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails

Reference 75

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.829661Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 25e91600-2c4c-42de-9ba0-b71b0d95558b · outbound

This paper cites Reddy and A.

Agent Safety Should Be a Runtime Contract Reddy and A

Reference 76

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.546211Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation af9fe6f4-5e54-40de-b42b-acd7e9ebb66e · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 77

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.520745Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 62150ed3-0f2a-49da-b073-1f4de9abcef1 · outbound

This paper cites Robinson.

Agent Safety Should Be a Runtime Contract Robinson

Reference 78

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.494107Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f1638fce-bec2-4e81-b6e4-5734f4760968 · outbound

This paper cites Identifying the Risks of LM Agents with an LM-Emulated Sandbox.

Agent Safety Should Be a Runtime Contract Identifying the Risks of LM Agents with an LM-Emulated Sandbox

Reference 79

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.859825Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 779109d4-8284-408a-aebe-1b518aa79e36 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 80

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.472021Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b779c20c-ec17-40f6-9b29-dd04f113f947 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 81

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.438541Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0bcd76f6-e3ac-4a7b-a8e9-c64f2a19270e · outbound

This paper cites Towards Understanding Sycophancy in Language Models.

Agent Safety Should Be a Runtime Contract Towards Understanding Sycophancy in Language Models

Reference 82

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.880401Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 574972e0-1c78-4261-a972-7631964dcc8b · outbound

This paper cites Sharwood.

Agent Safety Should Be a Runtime Contract Sharwood

Reference 83

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.413474Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation eb9abfb2-6f1c-47d1-abad-2f1b880472d7 · outbound

This paper cites Shavit et al.

Agent Safety Should Be a Runtime Contract Shavit et al

Reference 84

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.371441Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0013899b-85a3-4ce1-ac6e-4d2af1b237da · outbound

This paper cites do anything now.

Agent Safety Should Be a Runtime Contract do anything now

Reference 85

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.350995Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation caea7364-5a45-4cbe-8909-03661c91b86c · outbound

This paper cites Skalse, N.

Agent Safety Should Be a Runtime Contract Skalse, N

Reference 86

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.323017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3c364802-eec7-4b6d-985d-7162aee549c0 · outbound

This paper cites Stiennon, L.

Agent Safety Should Be a Runtime Contract Stiennon, L

Reference 87

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.287454Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8e78c707-bec2-4671-868a-d8259b85f6fc · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 88

Resolution: metadata mismatch; raw_fallback, observed 2026-08-15T14:19:14.334812Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d9579374-d049-48f1-86d3-7e38a3f02e13 · outbound

This paper cites Templeton, T.

Agent Safety Should Be a Runtime Contract Templeton, T

Reference 89

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.257243Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bc766391-3757-4d2f-8079-0d73cf1b2f32 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 90

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.227550Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4b444593-a4db-43fa-8e7e-af01a62f347d · outbound

This paper cites Recent frontier models are reward hacking.

Agent Safety Should Be a Runtime Contract Recent frontier models are reward hacking

Reference 91

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.195866Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d72e8010-6c07-41a6-af8b-07ab0469993a · outbound

This paper cites D$^2$LV: A Data-Driven and Local-Verification Approach for Image Copy Detection.

Agent Safety Should Be a Runtime Contract D$^2$LV: A Data-Driven and Local-Verification Approach for Image Copy Detection

Reference 92

Resolution: verified exact; local_arxiv, observed 2026-08-15T14:19:14.073142Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7c35d54b-82b3-4d5d-85f2-ddb367d14286 · outbound

This paper cites Are "Solved Issues" in SWE-bench Really Solved Correctly? An Empirical Study.

Agent Safety Should Be a Runtime Contract Are "Solved Issues" in SWE-bench Really Solved Correctly? An Empirical Study

Reference 93

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.956774Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a7d84a3b-a8dc-4882-a567-9ab7fd677461 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 94

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.160226Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7e2e9e9a-7fe0-492a-a0a9-d4124f888d87 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 95

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.971491Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e726e422-6de1-4807-a43c-ae8942b85159 · outbound

This paper cites Fundamental Limitations of Alignment in Large Language Models.

Agent Safety Should Be a Runtime Contract Fundamental Limitations of Alignment in Large Language Models

Reference 96

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.977631Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 933e9d9a-13e5-49af-ab4a-1157bbacc3ec · outbound

This paper cites Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models.

Agent Safety Should Be a Runtime Contract Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models

Reference 97

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:13.984292Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ac5ecb8a-d6f5-4ed7-8d00-2880bee74e46 · outbound

This paper cites an unresolved cited work.

Agent Safety Should Be a Runtime Contract Unresolved cited work

Reference 98

Resolution: unresolved; raw_fallback, observed 2026-08-15T14:19:15.117217Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation cf794151-8f81-49e3-a304-ae80f65e6efb · outbound

This paper cites hallucinates.

Agent Safety Should Be a Runtime Contract hallucinates

Reference 99

Resolution: verified fuzzy; raw_fallback, observed 2026-08-15T14:19:15.094474Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e2b186c1-b8e7-4440-af39-d8191b3b9363 · outbound

This paper cites Establishing Best Practices for Building Rigorous Agentic Benchmarks.

Agent Safety Should Be a Runtime Contract Establishing Best Practices for Building Rigorous Agentic Benchmarks

Reference 100

Resolution: unresolved; no resolver link, observed 2026-08-15T14:19:14.004821Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers