paper-with-me

Papers

TRACES: Proactive Safety Auditing for Multi-Turn LLM Agents via Trajectory-State Modeling

2026-05-26 · Jiaqian Li, Yanshu Li, Boxuan Zhang, Ruixiang Tang, Kuan-Hao Huang arxiv

LLM agents increasingly operate through multi-turn tool use and environment interaction, where safety risks often emerge from intermediate steps long before they surface in the final outcome. Reactive auditing is therefore insufficient: post-hoc diagnosis frequently misses the chance to flag risks while they are unfolding. We propose TRACES, a representation-based proactive auditor that learns prefix-level trajectory risk states from the hidden representations of an observer LLM. TRACES induces latent mechanism features from step representations and models their temporal evolution to estimate whether a partial trajectory is drifting toward unsafe behavior. To sidestep the cost and ambiguity of step-level risk annotation, TRACES is trained with weak trajectory-level supervision while still producing dense prefix-level risk estimates. Across multiple agent safety benchmarks, TRACES improves both full-trajectory safety prediction and proactive risk discrimination. Our analyses further suggest that these risk states can help train a safer agent, highlighting the broader potential of proactive auditing for long-horizon agent safety.

📄 PDF Abstract BibTeX arXiv:2605.27690

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

EG-ARSA: An Expert-Grounded Open Model for Visual Road Safety Auditing in Low-Resource Settings

2026-08-24 · Md Thamed Bin Zaman Chowdhury, Moazzem Hossain arxiv

Road traffic injuries remain a major challenge in low- and middle-income countries, where proactive road safety auditing is limited by incomplete crash records, shortages of qualified auditors, and the high cost of large…

MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits

2025-04-02 · Brandon Radosevich, John Halloran

To reduce development overhead and enable seamless integration between potential components comprising any given generative AI application, the Model Context Protocol (MCP) (Anthropic, 2024) has recently been released an…

Detecting Safety Violations Across Many Agent Traces

2026-04-13 · Adam Stein, Davis Brown, Hamed Hassani, Mayur Naik 외 arxiv

To identify safety violations, auditors often search over large sets of agent traces. This search is difficult because failures are often rare, complex, and sometimes even adversarially hidden and only detectable when mu…

Beyond the Prompt: Jailbreaking Function-Calling LLMs via Simulated Moderation Traces

2026-07-01 · Junlong Liu, Haobo Wang, Weiqi Luo, Xiaojun Jia arxiv

Jailbreak attacks remain a critical threat to the safe deployment of large language models (LLMs). While prior work has primarily studied attacks and defenses at the prompt level, we show that this prompt-centric paradig…

Automata from Agent Traces: Failure and Next-Step Prediction

2026-08-24 · Seonglae Cho, Franklin Cardenoso Fernandez, Umar Mohammed, Zekun Wu 외 hf

LLM-based agents execute multi-step tasks, but their behavioral structure remains opaque: long unstructured traces resist the safety auditing and runtime monitoring that deployment requires. Existing approaches operate p…