Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents.

arXiv:2610.00400v1 Announce Type: cross Abstract: Multi-turn attacks on agentic systems can compose individually permissible actions into harmful outcomes, challenging defenses that assess actions or states in isolation. We show that such attacks leave a detec