RCA · later AI research
PD-01 · LEDGER #193 · RCA / AI · 2026-03-04
From Spark to Fire: Modeling and Mitigating Error Cascades in LLM-Based Multi-Agent CollaborationEarlier Reyes research · 2025-06-11 ↓ Later external work · 2026-03-04
Technical correspondence: Multi-agent error cascades through dependency graphs, amplified false consensus, and suppression by an external monitoring layer.
Evidence boundary: Models injected errors and defenses in multi-agent collaboration; does not evaluate RCA's quantitative criticality ratio.
PD-02 · LEDGER #184 · RCA / AI · 2026-05-11
Conformity Generates Collective Misalignment in AI Agents SocietiesEarlier Reyes research · 2025-06-11 ↓ Later external work · 2026-05-11
Technical correspondence: Collective misalignment from individually aligned interacting agents, conformity, and persistent misaligned group states.
Evidence boundary: Statistical-physics model of agent opinion dynamics, not experimental validation of the RCA substrate.
PD-03 · LEDGER #199 · RCA / AI · 2026-05-04
MAGE: Safeguarding LLM Agents against Long-Horizon Threats via Shadow MemoryEarlier Reyes research · 2025-06-11 ↓ Later external work · 2026-05-04
Technical correspondence: Persistent safety-focused shadow memory, long-horizon deviation detection, and pre-action protection.
Evidence boundary: A distinct safety defense with functional resemblance to RCA's external anchoring; mechanisms and implementations differ.
PD-04 · LEDGER #178 · RCA / AI · 2026-09-23
Reward Hacking Challenges Oversight of Autonomous Research AgentsEarlier Reyes research · 2025-06-11 ↓ Later external work · 2026-09-23
Technical correspondence: Reward hacking in autonomous research loops, evaluator feedback, and iterative evasion.
Evidence boundary: Empirical evidence of an RCA-relevant failure class; not a test of RCA prediction ratios or physical mitigation.
PD-05 · LEDGER #180 · RCA / AI · 2026-03-16
AgentWorm: Self-Propagating Attacks Across LLM Agent EcosystemsEarlier Reyes research · 2025-06-11 ↓ Later external work · 2026-03-16
Technical correspondence: Autonomous agent propagation, persistent compromise across restarts, and tool-mediated cross-agent infection.
Evidence boundary: Security experiment; not evidence of access to RCA or proof that all propagation is uncontrollable.
PD-06 · LEDGER #183 · RCA / AI · 2026-06-04
The Self-Correction Illusion: Role Relabeling Gates Explicit Error Flagging in Large Language ModelsEarlier Reyes research · 2025-06-11 ↓ Later external work · 2026-06-04
Technical correspondence: Failure to flag self-generated errors under some role labels, with substantially different outcomes under role relabeling.
Evidence boundary: Role-label experiments isolate one self-correction limitation; do not measure RCA anchor decay or collapse thresholds.
Version note: Current arXiv v2 title differs from earlier ledger title.
PD-09 · LEDGER #176 · RCA / AI · 2026-05-04 · 325 days (10.7 months) from earliest identified public archive
Autonomous LLM Agent Worms: Cross-Platform Propagation, Automated Discovery and Temporal Re-Entry DefenseEarlier Reyes record · 2025-06-11 manuscript (2025-06-13 earliest public archive) ↓ Later external work · 2026-05-04
Technical correspondence: Persistent agent files and scheduled re-entry carry attacker-influenced instructions across restarts, agent boundaries and platforms; external gating of memory promotion and capabilities interrupts propagation.
Evidence boundary: The paper studies adversarial worms and mitigation in agent frameworks. It does not test RCA's criticality law, predict a universal propagation-to-correction ratio, or establish that RCA informed the work.
PD-10 · LEDGER #187 · RCA / AI · 2026-05-19 · 340 days (11.2 months) from earliest identified public archive
CASPIAN: Online Detection and Attribution of Cascade Attacks in LLM Multi-Agent Systems via Cross-Channel Causal MonitoringEarlier Reyes record · 2025-06-11 manuscript (2025-06-13 earliest public archive) ↓ Later external work · 2026-05-19
Technical correspondence: Agent-to-agent influence cascades across interaction channels; cross-channel monitoring of emerging causal propagation routes identifies bridge and amplifier agents before locally benign events become system-level failure.
Evidence boundary: CASPIAN introduces its own transfer-entropy influence matrix and benchmarks detection; no derivation from RCA's field model or independent measurement of its numerical propagation/correction ratio.
PD-11 · LEDGER #186 · RCA / AI · 2025-12-09 · 179 days (5.9 months) from earliest identified public archive
OWASP Top 10 for Agentic Applications for 2026 — ASI08 Cascading FailuresEarlier Reyes record · 2025-06-11 manuscript (2025-06-13 earliest public archive) ↓ Later external work · 2025-12-09
Technical correspondence: OWASP ASI08 names cascading failures in agentic applications as an operational security risk, highlighting chains of faults or compromised inputs propagating across automated agent workflows.
Evidence boundary: This is an institutional risk taxonomy assembled from broader community security experience. The December 2025 publication does not establish RCA adoption, an original empirical finding attributable to RCA, or proof of the WCT/RCA law.
Version note: Institutional ASI08 classification; no claim of OWASP adoption of RCA.
PD-12 · LEDGER #188 · RCA / AI · 2026-04-09 · 300 days (9.9 months) from earliest identified public archive
ACIArena: Toward Unified Evaluation for Agent Cascading InjectionEarlier Reyes record · 2025-06-11 manuscript (2025-06-13 earliest public archive) ↓ Later external work · 2026-04-09
Technical correspondence: A compromised agent exploits inter-agent trust to cascade malicious instructions, with attack transfer depending on roles, communication surfaces and defensive boundaries rather than single-agent behavior alone.
Evidence boundary: ACIArena is a security benchmark for injection across agent interfaces. It does not independently confirm RCA's instability threshold or establish a propagation-rate/correction-rate measurement.
PD-13 · LEDGER #185 · RCA / AI · 2026-09-01 · 445 days (14.6 months) from earliest identified public archive
SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM SystemsEarlier Reyes record · 2025-06-11 manuscript (2025-06-13 earliest public archive) ↓ Later external work · 2026-09-01
Technical correspondence: Individually checked agents can still form unsafe multi-agent execution paths when information, authority and state cross trust boundaries; path closure and recovery require system-level evaluation.
Evidence boundary: This is a systematization of earlier multi-agent security literature, not a new RCA-specific experiment or independently confirmed causal adoption of RCA. It does not validate the RCA ratio.
WCT · later physics research
PD-07 · LEDGER #8 · WCT / physics · 2026-05-11
Charged-Lepton Koide Geometry from a Green-Dressed Compact Family CycleEarlier Reyes research · 2025-12-10 ↓ Later external work · 2026-05-11
Technical correspondence: Charged-lepton Koide geometry, compact phase cycles, and a 45-degree mass-vector cone.
Evidence boundary: Both address Koide geometry but adopt different assumptions and do not derive one another. The external paper's current v2 was revised October 5, 2026.
Version note: Comparison to current arXiv v2; verify details against v1 before any stronger priority claim.
PD-08 · LEDGER #12 · WCT / physics · 2026-06-02
Torsion-induced gauge structure in curved quantum waveguidesEarlier Reyes research · 2025-10-27 ↓ Later external work · 2026-06-02
Technical correspondence: Frenet-frame torsion, geometry-induced effective gauge potential, and closed-curve holonomy.
Evidence boundary: Thin-waveguide derivation has its own assumptions and does not establish WCT's effective-mass or emergent-spacetime relation.