{"id":"https://openalex.org/W7160869225","doi":"https://doi.org/10.48550/arxiv.2605.06992","title":"Why Does Agentic Safety Fail to Generalize Across Tasks?","display_name":"Why Does Agentic Safety Fail to Generalize Across Tasks?","publication_year":2026,"publication_date":"2026-05-07","ids":{"openalex":"https://openalex.org/W7160869225","doi":"https://doi.org/10.48550/arxiv.2605.06992"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.06992","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06992","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.06992","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135827866","display_name":"Yonatan Slutzky","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Slutzky, Yonatan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062564045","display_name":"Yotam Alexander","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alexander, Yotam","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120512329","display_name":"Tomer Slor","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Slor, Tomer","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120326459","display_name":"Yoav Nagel","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nagel, Yoav","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5104108669","display_name":"Nadav Cohen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cohen, Nadav","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6640999913215637,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6640999913215637,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10462","display_name":"Reinforcement Learning in Robotics","score":0.07029999792575836,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10586","display_name":"Robotic Path Planning Algorithms","score":0.060499999672174454,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.7675999999046326},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.5591999888420105},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.522599995136261},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5026999711990356},{"id":"https://openalex.org/keywords/lipschitz-continuity","display_name":"Lipschitz continuity","score":0.477400004863739},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.4262000024318695},{"id":"https://openalex.org/keywords/quadcopter","display_name":"Quadcopter","score":0.41670000553131104}],"concepts":[{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.7675999999046326},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.5591999888420105},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5572999715805054},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.522599995136261},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5026999711990356},{"id":"https://openalex.org/C22324862","wikidata":"https://www.wikidata.org/wiki/Q652707","display_name":"Lipschitz continuity","level":2,"score":0.477400004863739},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.4262000024318695},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4203999936580658},{"id":"https://openalex.org/C2779199153","wikidata":"https://www.wikidata.org/wiki/Q43965","display_name":"Quadcopter","level":2,"score":0.41670000553131104},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.39079999923706055},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.37279999256134033},{"id":"https://openalex.org/C2777027219","wikidata":"https://www.wikidata.org/wiki/Q1284190","display_name":"Constant (computer programming)","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.36410000920295715},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3634999990463257},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.33230000734329224},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30169999599456787},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.28790000081062317},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.06992","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06992","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.06992","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06992","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4356813132762909,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI":[0],"agents":[1],"are":[2,93],"increasingly":[3],"deployed":[4],"in":[5,29,172,182],"multi-task":[6],"settings,":[7],"where":[8],"the":[9,19,60,68,110,123,142],"task":[10,114,127,145],"to":[11,23,62,65,70,89,97,147,194,203],"perform":[12],"is":[13,32,119],"specified":[14],"at":[15],"test":[16],"time,":[17],"and":[18,49,81,115,128,139,181,201],"agent":[20,36,180],"must":[21,37],"generalize":[22,90],"unseen":[24,41,66],"tasks.":[25],"A":[26],"major":[27],"concern":[28],"such":[30],"settings":[31],"safety:":[33],"often,":[34],"an":[35,104,148,185],"not":[38,94],"only":[39],"execute":[40,63],"tasks,":[42,67],"but":[43,102],"do":[44,71],"so":[45,72],"while":[46],"avoiding":[47],"risks":[48],"handling":[50],"ones":[51],"that":[52,57,84,141,191],"materialize.":[53],"Empirical":[54],"evidence":[55],"suggests":[56],"even":[58],"when":[59],"ability":[61,69],"generalizes":[64],"safely":[73],"frequently":[74],"does":[75],"not.":[76],"This":[77],"paper":[78],"provides":[79],"theory":[80],"experiments":[82],"indicating":[83],"failures":[85],"of":[86,99,107,164],"agentic":[87,196],"safety":[88,108,156,197],"across":[91],"tasks":[92],"merely":[95],"due":[96],"limitations":[98],"training":[100],"methods,":[101],"reflect":[103],"inherent":[105],"property":[106],"itself:":[109],"relationship":[111,124],"between":[112,125],"a":[113,126,161,177,204],"its":[116,129],"safe":[117],"execution":[118,130],"more":[120],"complex":[121],"than":[122,158],"alone.":[131],"Theoretically,":[132],"we":[133,168],"analyze":[134],"linear-quadratic":[135],"control":[136],"with":[137,155,176,184],"$H_{\\infty}$-robustness,":[138],"prove":[140],"mapping":[143],"from":[144],"specification":[146],"optimal":[149],"controller":[150],"has":[151],"higher":[152],"Lipschitz":[153,162],"constant":[154],"requirements":[157],"without,":[159],"yielding":[160],"bound":[163],"independent":[165],"interest.":[166],"Empirically,":[167],"demonstrate":[169],"our":[170],"conclusions":[171],"simulated":[173],"quadcopter":[174],"navigation":[175],"neural":[178],"network":[179],"CRM":[183],"LLM":[186],"agent.":[187],"Our":[188],"findings":[189],"suggest":[190],"current":[192],"efforts":[193],"enhance":[195],"may":[198],"be":[199],"insufficient,":[200],"point":[202],"need":[205],"for":[206],"fundamentally":[207],"different":[208],"approaches.":[209]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-12T00:00:00"}