{"id":"https://openalex.org/W7203766845","doi":"https://doi.org/10.48550/arxiv.2608.17684","title":"Auditing Self-Evolution in Financial Agents: Capability Gains, Security Drift, and Execution-Interface Mismatch","display_name":"Auditing Self-Evolution in Financial Agents: Capability Gains, Security Drift, and Execution-Interface Mismatch","publication_year":2026,"publication_date":"2026-08-18","ids":{"openalex":"https://openalex.org/W7203766845","doi":"https://doi.org/10.48550/arxiv.2608.17684"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.17684","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.17684","pdf_url":"https://arxiv.org/pdf/2608.17684","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.17684","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5147469470","display_name":"Jialong Li","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Jialong","raw_affiliation_strings":["Independent"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Independent","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5147583712","display_name":"Jialing Zhu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Jialing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8823000192642212,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8823000192642212,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.017500000074505806,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.01549999974668026,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/self-evolving-agents","display_name":"self-evolving agents","score":0.8889999985694885},{"id":"https://openalex.org/keywords/financial-agents","display_name":"financial agents","score":0.8019999861717224}],"concepts":[{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.7763000130653381},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.6721000075340271},{"id":"https://openalex.org/C65155139","wikidata":"https://www.wikidata.org/wiki/Q5380912","display_name":"Envelope (radar)","level":3,"score":0.5239999890327454},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47429999709129333},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.46860000491142273},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4262999892234802},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.40639999508857727},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.39989998936653137},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.3314000070095062},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.32190001010894775},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.2628999948501587}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.17684","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.17684","pdf_url":"https://arxiv.org/pdf/2608.17684","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.17684","doi":"https://doi.org/10.48550/arxiv.2608.17684","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.17684","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.17684","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.17684","pdf_url":"https://arxiv.org/pdf/2608.17684","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7203766845.pdf","grobid_xml":"https://content.openalex.org/works/W7203766845.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W4388886073","https://openalex.org/W4388926382","https://openalex.org/W4402670146","https://openalex.org/W4405627542","https://openalex.org/W4412889677","https://openalex.org/W4415796224","https://openalex.org/W4415796822","https://openalex.org/W4415800455","https://openalex.org/W7133236450","https://openalex.org/W7160592713","https://openalex.org/W7162340582"],"related_works":["https://openalex.org/W7201871502","https://openalex.org/W7124179260","https://openalex.org/W3147740240","https://openalex.org/W7160997580","https://openalex.org/W7134884983","https://openalex.org/W7202180668","https://openalex.org/W7201875571","https://openalex.org/W7201834752","https://openalex.org/W7118006526","https://openalex.org/W7203492321"],"abstract_inverted_index":{"Self-evolving":[0],"agents":[1,190],"turn":[2],"experience":[3],"into":[4],"reusable":[5],"skills,":[6],"workflows,":[7],"or":[8,24],"memories,":[9],"but":[10],"post-evolution":[11],"accuracy":[12,204],"alone":[13],"does":[14],"not":[15,203],"show":[16],"whether":[17],"learned":[18],"behavior":[19,23],"preserves":[20],"previously":[21],"correct":[22],"security.":[25],"We":[26],"audit":[27],"SkillOpt,":[28],"Agent":[29],"Workflow":[30],"Memory":[31],"(AWM),":[32],"and":[33,48,95,110,181,200],"ReasoningBank":[34,123],"in":[35,114,120,154],"simulated":[36],"e-banking":[37],"using":[38],"matched":[39],"benign":[40,58],"acquisition":[41],"trajectories,":[42],"sealed":[43],"evaluation":[44,144],"endpoints,":[45],"execution-grounded":[46],"checks,":[47],"independent":[49],"state":[50,98,134],"replay.":[51],"On":[52],"Qwen":[53],"3.7":[54],"Flash,":[55],"SkillOpt":[56],"raises":[57,124],"utility":[59,125,169],"from":[60,70,80,91,170,177,183],"0.741":[61],"to":[62,66,72,82,93,101,126,172,179,185],"0.837":[63],"while":[64,174],"exposure":[65,78,175],"injected":[67],"content":[68],"rises":[69,90,176],"0.820":[71],"0.943.":[73],"Conditional":[74],"attack":[75,86],"success":[76,87],"after":[77],"falls":[79],"0.605":[81],"0.562,":[83],"yet":[84],"overall":[85],"rate":[88],"(ASR)":[89],"0.496":[92],"0.530":[94],"unauthorized":[96,133,197],"financial":[97,189],"changes":[99,112,135],"rise":[100],"0.685.":[102],"Across":[103],"three":[104],"independently":[105],"evolved":[106],"lineages,":[107],"capability,":[108],"exposure,":[109],"unauthorized-state":[111],"increase":[113],"all":[115],"three,":[116],"whereas":[117],"ASR":[118,182],"increases":[119],"only":[121,165],"two.":[122],"0.859":[127],"without":[128],"increasing":[129],"aggregate":[130],"ASR,":[131],"although":[132],"remain":[136],"slightly":[137],"above":[138],"Static.":[139],"AWM":[140],"reveals":[141],"a":[142,146,160],"separate":[143],"hazard:":[145],"literal":[147],"WebArena":[148],"text-action":[149],"envelope":[150,167],"disrupts":[151],"tool":[152],"execution":[153],"our":[155],"native":[156],"function-calling":[157],"executor.":[158],"In":[159],"post-hoc":[161],"sensitivity":[162],"test,":[163],"removing":[164],"that":[166],"restores":[168],"0.319":[171],"0.756,":[173],"0.299":[178],"0.909":[180],"0.195":[184],"0.575.":[186],"Auditing":[187],"self-evolving":[188],"therefore":[191],"requires":[192],"tracking":[193],"regressions,":[194],"attack-surface":[195],"contact,":[196],"financial-state":[198],"change,":[199],"artifact-executor":[201],"compatibility,":[202],"alone.":[205]},"counts_by_year":[{"year":2026,"cited_by_count":4}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-08-20T00:00:00"}