Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents
LoopHarness is presented, which restores a persistent, non-decaying safety state at the loop level at the loop level, and gives a complete evaluation protocol on native Agent-SafetyBench tasks with paired clean and attacked episodes, an outer-state attack suite whose decisive evidence exists only across iterations, per-module ablations, and an adaptive white-box red team.
Chenmin Wu, H. Jia, Yang Liu et al.
· 0 citations