2 papers
cs.CR2026
Agent Approval Laundering: Transitive Effects Beyond the Approved Invocation
Jinqian Zhang, Haojun Xia, Shujiang Wu +4
Coding-agent approval interfaces bind a human decision to a command or tool call, while developer tools execute the transitive workflow that invocation activates. Package installat…
cs.CR2026
Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents
Jinqian Zhang, Haojun Xia, Shujiang Wu +4
Multi-step tool-calling LLM agents rely on host runtimes to preserve state across turns. When a runtime carries an external tool return into later model inputs, providers meter it…