Preprint Open access
Representation Transitions Reveal Emerging Safety Risks in Multi-Turn LLM Agents
Multi-turn attacks on agentic systems can compose individually permissible actions into harmful outcomes, challenging defenses that assess actions or states in isolation. We show that such attacks leave a detectable signature in the agent's internal representations: harmful behavior emerges as an accumulated representa …