{"id":"https://openalex.org/W7136414848","doi":"https://doi.org/10.48550/arxiv.2603.12564","title":"Sell Me This Stock: Unsafe Recommendation Drift in LLM Agents","display_name":"Sell Me This Stock: Unsafe Recommendation Drift in LLM Agents","publication_year":2026,"publication_date":"2026-03-13","ids":{"openalex":"https://openalex.org/W7136414848","doi":"https://doi.org/10.48550/arxiv.2603.12564"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.12564","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12564","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.12564","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125476661","display_name":"Zekun Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Zekun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129585377","display_name":"Adriano Koshiyama","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Koshiyama, Adriano","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069959546","display_name":"Sahan Bulathwela","orcid":"https://orcid.org/0000-0002-5878-2143"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bulathwela, Sahan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5127801028","display_name":"Maria Perez-Ortiz","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Perez-Ortiz, Maria","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.15150000154972076,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.15150000154972076,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.08910000324249268,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.08829999715089798,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.7638000249862671},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.7016000151634216},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.5882999897003174},{"id":"https://openalex.org/keywords/language-change","display_name":"Language change","score":0.5572999715805054},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.5008999705314636},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4936999976634979}],"concepts":[{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.7638000249862671},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.7016000151634216},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.5882999897003174},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5720000267028809},{"id":"https://openalex.org/C2780027415","wikidata":"https://www.wikidata.org/wiki/Q524648","display_name":"Language change","level":2,"score":0.5572999715805054},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.5008999705314636},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4936999976634979},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.46459999680519104},{"id":"https://openalex.org/C207390915","wikidata":"https://www.wikidata.org/wiki/Q1230525","display_name":"Divergence (linguistics)","level":2,"score":0.44029998779296875},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31690001487731934},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3073999881744385},{"id":"https://openalex.org/C162118730","wikidata":"https://www.wikidata.org/wiki/Q1128453","display_name":"Actuarial science","level":1,"score":0.2806999981403351},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.2711000144481659}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.12564","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12564","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.12564","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12564","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.80287766456604}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"People":[0],"increasingly":[1],"use":[2],"LLM":[3],"agents":[4,96],"for":[5],"multi-turn":[6],"financial":[7,69],"recommendations,":[8],"where":[9],"the":[10,28,32,54,95,122,175,182,188,212,219,222,246,249],"agent":[11,247],"pulls":[12],"market":[13],"data":[14],"through":[15],"tools":[16],"and":[17,48,82,132,226,251],"tracks":[18],"user":[19],"preferences":[20],"across":[21,72,105,118],"turns.":[22],"When":[23],"tool":[24,84,160],"outputs":[25],"are":[26],"manipulated,":[27],"recommendations":[29,99],"stop":[30],"matching":[31],"user's":[33],"stated":[34],"risk":[35],"profile,":[36],"but":[37,198],"because":[38,218],"standard":[39],"metrics":[40],"like":[41],"NDCG":[42],"only":[43,174],"score":[44,51],"general":[45],"relevance,":[46],"risky":[47],"safe":[49],"stocks":[50,137],"alike,":[52],"so":[53],"metric":[55],"says":[56],"nothing":[57],"went":[58],"wrong.":[59],"We":[60,66],"call":[61],"this":[62,199],"gap":[63],"evaluation":[64],"blindness.":[65],"replay":[67],"23-turn":[68],"advisory":[70],"conversations":[71],"eight":[73,107],"language":[74],"models,":[75],"running":[76],"each":[77],"dialogue":[78],"twice":[79],"with":[80],"clean":[81,92],"manipulated":[83,123,166,224],"data.":[85],"Quality":[86],"scores":[87],"stay":[88],"nearly":[89],"identical":[90],"to":[91,142],"sessions":[93],"while":[94],"produce":[97],"risk-mismatched":[98],"in":[100,159],"65-99%":[101],"of":[102,115,135,181,211],"turns,":[103],"unanimous":[104],"all":[106],"models.":[108],"The":[109,147,168,184],"mechanism":[110],"is":[111,170],"visible":[112],"turn-by-turn:":[113],"80%":[114],"risk-score":[116],"citations":[117],"1,840":[119],"turns":[120],"reproduce":[121],"value":[124],"verbatim,":[125],"not":[126,171,201],"a":[127,227,238],"single":[128],"turn":[129,177,236],"pushes":[130],"back,":[131],"safe-language":[133],"framing":[134],"high-risk":[136],"ranges":[138],"from":[139,195],"14%":[140],"(Qwen2.5-7B)":[141],"69%":[143],"(Claude":[144],"Sonnet":[145],"4.6).":[146],"property":[148],"that":[149,230],"makes":[150,163],"frontier":[151,239],"models":[152],"good":[153],"agents,":[154],"faithfully":[155],"grounding":[156],"their":[157],"reasoning":[158],"outputs,":[161],"also":[162],"them":[164],"follow":[165],"ones.":[167],"damage":[169],"memory-driven:":[172],"contaminating":[173],"current":[176],"still":[178,241],"produces":[179],"95%":[180],"violations.":[183],"model":[185,240],"internally":[186],"distinguishes":[187],"manipulation":[189],"(sparse":[190],"autoencoder":[191],"features":[192],"separate":[193],"adversarial":[194],"random":[196],"perturbations),":[197],"does":[200],"translate":[202],"into":[203],"safer":[204],"output.":[205],"Activation-level":[206],"interventions":[207],"recover":[208],"under":[209],"6%":[210],"safety":[213],"gap,":[214],"prompt-level":[215],"self-verification":[216],"fails":[217],"self-check":[220],"reads":[221],"same":[223],"data,":[225],"parametric":[228],"cross-check":[229],"flags":[231],"contamination":[232],"at":[233],"99-100%":[234],"per":[235],"on":[237],"leaves":[242],"aggregate":[243],"suitability":[244],"unchanged:":[245],"identifies":[248],"tampering":[250],"recommends":[252],"it":[253],"anyway.":[254]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-17T00:00:00"}