2026 · Preprint · Tool-agent safety

SEAD

A State-Based Perspective on Attack and Defense in Tool-Using Agents.

Xinjie Shen^*, Junran Wang^*, Rongzhe Wei, Pan Li
^* Equal contribution

SEAD models attacks and defenses as partially observed state control. DART searches for harmful tool trajectories, while SAGE investigates relevant state with read-only queries before allowing or blocking actions.