2 papers
cs.CR2026
Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps
Xiaofeng Lin, Yukai Yang, Daniel Guo +3
Tool-using LLM agents interact with the world through actions that persist state in artifacts (e.g., workspace files or logs). Consequently, jailbreak defenses must reason about cr…
cs.AI2026
REFLECT: Intervention-Supported Error Attribution for Silent Failures in LLM Agent Traces
Xiaofeng Lin, Yingxu Wang, Tung Sum Thomas Kwok +4
Large language model (LLM) agents now solve complex tasks through long plan-and-execution traces, yet the ability to locate errors in a completed traces still lags far behind, espe…