Signed Manifests Protect Requirements in LLM Agent Handoffs
Signed HMAC-SHA256 manifests reduce unsafe commits in multi-agent handoffs from 69.4% to 9.0% across 1440 trajectories.
Stories per day · 30 days
3 RSS
Relatedagents1cms1code-signing1handoffs1lockfiles1mitmproxy1openssl1package-managers1requirement1supply-chain1trailofbits1zdi1
8 stories, newest first · one card per story
Stories tagged #integrity
OpenSSL CMS integrity-check flaw lets attackers tamper with messages
ZDI rates CVE-2026-34182 at CVSS 3.1 and says the attacker must already be able to modify the messages.
Package managers have an integrity problem
Trail of Bits tested 25 popular package managers against a malicious repository; fewer than half verified lockfile integrity and only Go verified signatures by default.
4
No AI agent follow-up paper meets DOE scientist conditions
Of 135 submissions, 114 fail an integrity check, often by claiming work never done.
EIFL: Efficiently Protecting Global Model Privacy and Integrity Against an Untrusted Server in Federated Learning
EIFL lets federated-learning clients keep a global model private and verify it against an untrusted server.
CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
Apache log4net RemoteSyslogAppender strips non-ASCII characters, CVE-2026-105244, CVSS 5.3.
Observational Indistinguishability and Integrity Blind Regions in Hybrid Quantum-Classical Workflows
Framework formalizes integrity blind regions in hybrid quantum-classical workflows, validated across 3,600 label interventions with conformal detection rules.
TrajMark: Ownership Attribution and Segment-Level Tamper Localization for Coding-Agent Trajectories
Researchers introduce TrajMark, a training-free watermarking framework for coding-agent trajectories that recovers ownership, detects 95.5-100% of edits, and localizes tampered regions.