Evidence · DiggingBeagle record
Kairos: transactional system-boundary enforcement for LLM agents
October 2026 academic preprint proposes an isolation-boundary reference monitor that stages filesystem/network effects, deferring uncertain ones for policy-oracle authorization. Primary full text unavailable in direct retrieval; publication abstract corroborated by independent indexing.
- Published
- Oct 13, 2026
- Publisher
- Hempel et al.
- Source role
- primary disclosure
Evidence record
October 2026 academic preprint proposes an isolation-boundary reference monitor that stages filesystem/network effects, deferring uncertain ones for policy-oracle authorization. Primary full text unavailable in direct retrieval; publication abstract corroborated by independent indexing.
Claim-level citations (2)
- supportsKairos stages agent side effects pending external authorization: The Kairos preprint reports reducing AgentDojo attack success from 47.0 percent to 2.7 percent while keeping benign utility around the undefended baseline.
Paper abstract, benchmark results on AgentDojo
- supportsKairos stages agent side effects pending external authorization: The proposed monitor mediates shell, tool and script actions at a system boundary and holds ambiguous file or network effects for subsequent authorization.
Paper abstract, reference monitor design