@misc{tool-emu,
  title = {Identifying the Risks of LM Agents with an LM-Emulated Sandbox},
  url = {https://arxiv.org/abs/2309.15817},
  author = {Yangjun Ruan and Honghua Dong and Andrew Wang and Silviu Pitis and Yongchao Zhou and Jimmy Ba and Yann Dubois and Chris J. Maddison and Tatsunori Hashimoto},
  year = {2023},
  date = {2023-09-25},
  version = {b939e7682699392e9c5a1328a3f23982af58b734e2f499ac00f0d315e757223b},
  note = {b939e7682699392e9c5a1328a3f23982af58b734e2f499ac00f0d315e757223b}
}

@misc{tool-emu-nuwa,
  title = {Identifying the Risks of LM Agents with an LM-Emulated Sandbox — NUWA research record},
  url = {https://whitzard.tech/en/nuwa/whitzard-index/work/tool-emu/},
  version = {2026-10-29.1},
  organization = {NUWA Frontier AI Safety Lab},
  howpublished = {Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--tool-emu.json},
  note = {NUWA research note. Source-reading scope and independent review status are stated on the record. Snapshot 2026-10-29.1. Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--tool-emu.json.}
}