PlanTERS formalizes relative security of prompt injection in agents
Revoking injectable tools at the first untrusted read is proved relatively secure on finite runs.
2 stories, newest first · one card per story
Revoking injectable tools at the first untrusted read is proved relatively secure on finite runs.
Authors confirm 18 evidence-path failures across 11 project groups, 14 of which reach enforcement boundaries.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views