SEAD: A State-Based Perspective on Attack and Defense in Tool-Using Agents
A state-based framework for attacks and defenses in tool-using agents, pairing execution-guided trajectory search with state-aware pre-execution defense.
Xinjie Shen
Runtime Defense
One Turn Too Late: Response-Aware Defense Against Hidden Malicious Intent in Multi-Turn Dialogue
A response-aware monitor trained to intervene at the first harm-enabling turn while preserving benign exploratory dialogue.