{
  "schema_version": "1.1",
  "id": "s13:https://arxiv.org/abs/2609.02786v1",
  "slug": "2609-02786v1-0eo17gt",
  "url": "https://feed7.dev/p/2609-02786v1-0eo17gt",
  "title": "SafeEvolve: Harness-Policy Co-Evolution from Agent Experience for Safety Alignment",
  "why_included": "SafeEvolve turns completed agent trajectories into reversible harness updates and policy training, linking runtime safeguards with learned multi-step behavior.",
  "summary": "**SafeEvolve** feeds safety evidence from completed on-policy trajectories into a continual loop. It makes bounded updates to safety prompts and hierarchical skills, then trains the policy with a **two-stage SFT-RL** process.",
  "practical_implication": "For agent builders, the useful pattern is to retain trajectory evidence, translate it into auditable and reversible harness artifacts, and train models to actively use those artifacts rather than relying on runtime controls alone.",
  "agent_context": "**SafeEvolve** feeds safety evidence from completed on-policy trajectories into a continual loop. It makes bounded updates to safety prompts and hierarchical skills, then trains the policy with a **two-stage SFT-RL** process.\n\nFor agent builders, the useful pattern is to retain trajectory evidence, translate it into auditable and reversible harness artifacts, and train models to actively use those artifacts rather than relying on runtime controls alone.\n\nOn AgentDojo with Qwen3.5-4B, the paper reports a **3× ASR reduction** while benign utility moved from **59.79% to 61.86%**. The abstract does not provide absolute ASR values or enough detail to judge transfer beyond the tested benchmarks.",
  "source": {
    "name": "arXiv",
    "url": "https://arxiv.org/abs/2609.02786v1",
    "published_at": "2026-09-02T16:19:54.000Z"
  },
  "source_class": "blog_post",
  "content_type": "Paper",
  "layer": "agent",
  "domains": [
    "coding",
    "security"
  ],
  "topics": [
    "harness-engineering",
    "skills",
    "agent-reliability"
  ],
  "verification": {
    "status": "needs_review",
    "label": "Needs Review",
    "method": "unverified",
    "verified_at": null
  },
  "uncertainty": [
    "On AgentDojo with Qwen3.5-4B, the paper reports a **3× ASR reduction** while benign utility moved from **59.79% to 61.86%**. The abstract does not provide absolute ASR values or enough detail to judge transfer beyond the tested benchmarks."
  ],
  "connected_context": {
    "meaning": "This advances trajectory logging from observability into a continual safety mechanism: completed experience is converted into bounded, reversible prompt and skill updates, then reinforced through training. It confirms the harness as a safety layer but couples it to policy adaptation rather than relying only on runtime gates. The AgentDojo result is promising but does not establish transfer beyond the tested model and benchmarks.",
    "corpus_size": 669,
    "generated_at": "2026-09-03T10:01:48.808Z",
    "connections": [
      {
        "title": "Agents Are Where Microservices Were in 2015 — Roberto Milev & Uday Kanagala, Navan",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=32nrHU6zHU8",
        "feed7_url": "https://feed7.dev/p/agents-are-where-microservices-were-in-2015-roberto-milev-uday-kanagala-1pk4hle",
        "reason": "Navan treats captured trajectories and testable skills as production infrastructure; SafeEvolve makes those trajectories inputs to controlled harness updates and subsequent policy training."
      },
      {
        "title": "In Code They Act, In Proof We Trust — Erik Meijer, Leibniz Labs",
        "source_name": "YouTube",
        "source_url": "https://www.youtube.com/watch?v=-CnA2lGfymY",
        "feed7_url": "https://feed7.dev/p/in-code-they-act-in-proof-we-trust-erik-meijer-leibniz-labs-1lyno2y",
        "reason": "The proof-oriented harness blocks unsafe side effects before execution, while SafeEvolve learns from completed trajectories to update future prompts, skills, and policy; these are complementary runtime and continual controls."
      },
      {
        "title": "Guide, Verify, Solve — Anirban Chatterjee, Sonar",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=03l29gJXpCE",
        "feed7_url": "https://feed7.dev/p/guide-verify-solve-anirban-chatterjee-sonar-1igfmbm",
        "reason": "Sonar’s guide-verify-solve loop argues that controls must shape each iteration; SafeEvolve operationalizes a related feedback loop by translating observed safety evidence into bounded harness artifacts and training."
      },
      {
        "title": "We Vetted 2000 AI Skills Before They Reached Developers — Lucas Palma, Nubank",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=iKQ78wyJEXU",
        "feed7_url": "https://feed7.dev/p/we-vetted-2000-ai-skills-before-they-reached-developers-lucas-palma-nuba-0k4ehkz",
        "reason": "Because SafeEvolve continually changes hierarchical skills, Nubank’s scanning and distribution gates become an implementation prerequisite for reviewing those generated artifacts before deployment."
      }
    ]
  },
  "lifecycle": "Current",
  "published_at": "2026-09-02T16:19:54.000Z",
  "modified_at": "2026-09-02T16:19:54.000Z",
  "supersedes": [],
  "expires_at": null,
  "formats": {
    "html": "https://feed7.dev/p/2609-02786v1-0eo17gt",
    "json": "https://feed7.dev/p/2609-02786v1-0eo17gt.json",
    "markdown": "https://feed7.dev/p/2609-02786v1-0eo17gt.md"
  }
}