SEAD: A State-Based Perspective on Attack and Defense in Tool-Using Agents.

arXiv:2609.34518v1 Announce Type: cross Abstract: Language-model agents increasingly use tools to act on external systems. Earlier actions can alter files, permissions, database records, or other state, making a later routine-looking action harmful. Yet the vi