Evidence · DiggingBeagle record
The Envelope Layer: An Underestimated Surface of LLM Agent Defense
Primary A2A experiment varying authenticated peer-envelope wording, forged user-origin labels and retained memory. Its results distinguish transport authentication from delegated human authority; no production interaction is documented.
- Source role
- primary disclosure
Evidence record
Primary A2A experiment varying authenticated peer-envelope wording, forged user-origin labels and retained memory. Its results distinguish transport authentication from delegated human authority; no production interaction is documented.
Claim-level citations (2)
- supportsAn authenticated A2A peer message could still forge the authority of a local user: The study describes attacks that alter envelope labels and authority claims without changing the underlying authenticated peer channel.
Section III threat model; Sections IV and V A2A experiments
- supportsAn authenticated A2A peer message could still forge the authority of a local user: The authors separately test memory following earlier successes and failures, showing that remembered interaction outcomes can affect later susceptibility.
Section III-D and V-B memory experiments