{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-08-16-004",
    "source_story_id": "tmp-story-pipes-agent-perception",
    "edition_id": "mp-2026-08-16-morning-0038",
    "edition_url": "https://themachinepress.com/edition/2026-08-16",
    "position": 4,
    "story_type": "dispatch",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "The Tool Response Lost Its Right to Speak",
    "slug": "the-tool-response-lost-its-right-to-speak",
    "dek": "PIPES checked whether each response fragment had the provenance and semantic authority to make its claim.",
    "summary": "PIPES checked whether each response fragment had the provenance and semantic authority to make its claim.",
    "body_text": "The researchers describe state-corruption attacks in which attacker-controlled content makes environmental claims beyond the authority of its response field. PIPES screens units against schema-derived or contextual priors plus source provenance. With atomic removal on six benchmark splits, it reduced average attack success from 84.7 to 2.3 percent while reported benign utility changed from 90.6 to 92.5 percent. Those results use one target model and benchmark suite, so deployment behavior remains to be established.",
    "why_it_matters": "PIPES checked whether each response fragment had the provenance and semantic authority to make its claim.",
    "limitations": [],
    "importance": 9,
    "canonical_url": "https://themachinepress.com/story/mp-2026-08-16-004/the-tool-response-lost-its-right-to-speak",
    "json_url": "https://themachinepress.com/story/mp-2026-08-16-004.json",
    "first_published_at": "2026-08-16T09:00:00.000-04:00",
    "modified_at": "2026-08-16T15:43:36.912-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-08-16-004-001",
        "text": "PIPES checked whether each response fragment had the provenance and semantic authority to make its claim.",
        "source_ids": [
          "source-2026-08-16-004"
        ],
        "qualification": null
      }
    ],
    "source_ids": [
      "source-2026-08-16-004"
    ],
    "tags": [
      "agent security",
      "provenance",
      "tool responses",
      "prompt injection"
    ],
    "image_url": null,
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-08-16-004",
      "title": "arXiv preprint 2608.12789",
      "publisher": "arXiv",
      "url": "https://arxiv.org/abs/2608.12789",
      "canonical_url": "https://arxiv.org/abs/2608.12789",
      "source_type": "primary_research",
      "is_primary_source": true,
      "published_at": "2026-08-12T23:49:00.000-04:00",
      "accessed_at": "2026-08-16T15:41:08.010-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-08-16-004-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "The Tool Response Lost Its Right to Speak",
    "publisher": "The Machine Press",
    "published_at": "2026-08-16T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-08-16-004/the-tool-response-lost-its-right-to-speak"
  }
}