JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety

Yuan Xiong, Linji Hao, Shizhu He, Yequan Wang, Lijun Li
7/22/2026
cs.AIcs.CLcs.CR

No confident code implementation found for this paper. 3 possible matches can be shown below.

Abstract

Agent safety is moving from content moderation toward preventing operational failures before tool-using agents act. We propose Janus, a foresight-oriented framework for long-horizon agent safety that trains guards to anticipate delayed risks from partial trajectories. Janus synthesizes diverse agent trajectories via multi-agent simulation and learns a shared policy with two coupled tasks: an anticipation task that forecasts safety-relevant futures and an adjudication task that decides safety from both the observed prefix and anticipated future. The two tasks are jointly optimized with CoAA-RL, which rewards forecasts by their utility for downstream safety judgment. The resulting guard model, Vanguard, blocks unsafe actions before execution. Across four agent-safety benchmarks, Vanguard improves average protection by 15.9 percentage points over baseline guards while increasing benign task completion by 5.1 percentage points.

View on arXivView PDF

Code Implementations

No confident code match yet

We couldn't find an author-owned or strongly-evidenced community implementation for this paper. 3 weaker matches are hidden by default — verify before relying on them.

No code implementations found yet.

Know of an implementation? Let us know in the comments below!

Similar Papers

Cite this paper

@article{xiong2026janus,
  title  = {JANUS: Foreseeing Latent Risk for Long-Horizon Agent Safety},
  author = {Yuan Xiong and Linji Hao and Shizhu He and Yequan Wang and Lijun Li},
  year   = {2026},
  eprint = {2607.19913},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2607.19913v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2607.19913.svg)](https://codeofpaper.com/paper/2607.19913)

Discussion