{"id":"https://openalex.org/W7165648895","doi":"https://doi.org/10.48550/arxiv.2606.21732","title":"Safe to Check, Unsafe to Use: Relinking at the Compression Boundary of LLM Agents","display_name":"Safe to Check, Unsafe to Use: Relinking at the Compression Boundary of LLM Agents","publication_year":2026,"publication_date":"2026-06-19","ids":{"openalex":"https://openalex.org/W7165648895","doi":"https://doi.org/10.48550/arxiv.2606.21732"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.21732","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.21732","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.21732","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104347529","display_name":"Zesen Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Zesen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139159333","display_name":"Zihan Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Zihan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5048358055","display_name":"Dongdong She","orcid":"https://orcid.org/0000-0001-6655-0468"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"She, Dongdong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6171000003814697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6171000003814697,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.13359999656677246,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.07720000296831131,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compression","display_name":"Compression (physics)","score":0.609499990940094},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.5949000120162964},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.5794000029563904},{"id":"https://openalex.org/keywords/automatic-summarization","display_name":"Automatic summarization","score":0.48989999294281006},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.4577000141143799},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.3626999855041504},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.3582000136375427}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6488999724388123},{"id":"https://openalex.org/C180016635","wikidata":"https://www.wikidata.org/wiki/Q2712821","display_name":"Compression (physics)","level":2,"score":0.609499990940094},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.5949000120162964},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.5794000029563904},{"id":"https://openalex.org/C170858558","wikidata":"https://www.wikidata.org/wiki/Q1394144","display_name":"Automatic summarization","level":2,"score":0.48989999294281006},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.4577000141143799},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.3626999855041504},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.3582000136375427},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34850001335144043},{"id":"https://openalex.org/C2777552930","wikidata":"https://www.wikidata.org/wiki/Q707806","display_name":"Hemostat","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C124851039","wikidata":"https://www.wikidata.org/wiki/Q2665459","display_name":"Compressed sensing","level":2,"score":0.3312999904155731},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.329800009727478},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.2962999939918518},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C131097465","wikidata":"https://www.wikidata.org/wiki/Q178898","display_name":"Gas compressor","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2630999982357025},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2599000036716461}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.21732","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.21732","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.21732","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.21732","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Summarization-based":[0],"prompt":[1,24,60],"compression":[2],"is":[3],"increasingly":[4],"used":[5],"by":[6],"LLM":[7],"agents":[8],"to":[9,93,153,166],"shorten":[10],"long,":[11],"distributed":[12],"contexts,":[13],"but":[14],"it":[15],"shifts":[16],"the":[17,22,26,42,71,103,125],"security":[18],"boundary:":[19],"filters":[20],"inspect":[21],"pre-compression":[23],"while":[25,123],"backend":[27],"acts":[28],"on":[29],"a":[30,38,46,55],"newly":[31],"generated":[32],"compressed":[33],"context.":[34,73],"We":[35,74,101],"identify":[36],"relinking,":[37],"compression-boundary":[39],"vulnerability":[40],"where":[41],"compressor":[43],"behaves":[44],"as":[45,106],"confused":[47],"deputy,":[48],"summarizing":[49],"distributed,":[50],"locally":[51],"benign":[52,121],"fragments":[53,85,91,122],"into":[54,120],"complete":[56,126],"malicious":[57,68,118],"instruction.":[58],"Unlike":[59],"injection,":[61],"relinking":[62,77,108],"need":[63],"not":[64],"place":[65],"an":[66,112],"explicitly":[67],"payload":[69,127],"in":[70],"source":[72],"show":[75],"that":[76,116],"arises":[78],"from":[79],"summarization":[80],"itself:":[81],"attention":[82],"makes":[83,89],"separated":[84],"jointly":[86],"available,":[87],"pre-training":[88],"compatible":[90],"plausible":[92],"connect,":[94],"and":[95,109,141],"post-training":[96],"favors":[97],"compact":[98],"backend-actionable":[99],"summaries.":[100],"formalize":[102],"attacker-induced":[104],"form":[105],"adversarial":[107,156],"present":[110],"Relink,":[111],"automated":[113],"DSL-based":[114],"tool":[115],"splits":[117],"payloads":[119],"keeping":[124],"absent":[128],"before":[129],"compression.":[130],"Across":[131],"four":[132],"long-context":[133],"agent":[134],"benchmarks,":[135],"Relink":[136,139],"achieves":[137],"86.9%":[138],"Rate":[140,144,165],"Backend":[142,163],"Action":[143,164],"versus":[145],"17.0%":[146],"for":[147],"clean-split":[148],"controls.":[149],"Existing":[150],"defenses":[151],"fail":[152],"reliably":[154],"capture":[155],"relinking;":[157],"our":[158],"KBRA":[159],"defense":[160],"reduces":[161],"residual":[162],"0.0%.":[167]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-24T00:00:00"}