Reassembling Distributed Risk: Trajectory-Conditioned Action Generation for Multi-Turn Agent Safety
This work proposes ReDiR, a generation-time defense that conditions action generation on trajectory-level security evidence and reduces attack success rates to below 8%, transfers to unseen tool domains, and preserves benign fidelity with low computational overhead.