Reviewed by the event organisers
Permanent, citable homes for conference papers.
Open-access proceedings for conferences, workshops and symposia. Organisers deposit their accepted papers; every paper and every volume receives a DOI.
2 resultsSearch & filters ↓
Tool-using agents are typically granted broad credentials, so a single injected instruction can cause large harm. We describe a capability-token scheme in which every tool call carries a narrowly scoped, short-lived token issued by a policy layer outside the model. A prototype blocks all 41 attack scripts in our test suite with under 4 ms of added latency.
Sofia Lindqvist, Julia Fernandes
Auditing an agent requires knowing what it saw, decided and did. We propose a small, open logging schema with eleven required fields, and show that it is sufficient to reconstruct the action sequence for 96% of runs in a sample of public agent traces. The schema is published under CC0.
