Trustworthy agents, from attacks to defenses

I study how autonomous AI agents fail, and how to make them safer in real execution environments.

My work focuses on computer-use and coding agents, including harmful trajectory benchmarks, skill-level backdoors, runtime monitoring, process-level verification, and training safer guard models from real interaction traces.