{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-09-04-008",
    "source_story_id": "tmp-story-sentinel-rl-soc-topology",
    "edition_id": "mp-2026-09-04-morning-0057",
    "edition_url": "https://themachinepress.com/edition/2026-09-04",
    "position": 8,
    "story_type": "dispatch",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "The Security Agent Handed the Network Graph to a Smaller Policy",
    "slug": "the-security-agent-handed-the-network-graph-to-a-smaller-policy",
    "dek": "Sentinel-RL reserves graph topology and constrained actions for specialized models while the LLM writes an analyst-facing account.",
    "summary": "Sentinel-RL reserves graph topology and constrained actions for specialized models while the LLM writes an analyst-facing account.",
    "body_text": "A graph-attention encoder compresses a live authentication subgraph, a PPO policy chooses from constrained investigation steps, and an LLM may explain recommendations only after critic review and before human approval. In tests using the LANL security dataset and Indiana University's Quartz cluster, the authors report 0.91 precision, 0.87 recall and a median 6.3-second detect-to-approval loop; a 24-million-edge Neo4j load completed in 14.2 minutes. These are system-specific evaluation results, not proof of safe autonomous containment.",
    "why_it_matters": "Sentinel-RL reserves graph topology and constrained actions for specialized models while the LLM writes an analyst-facing account.",
    "limitations": [
      "A graph-attention encoder compresses a live authentication subgraph, a PPO policy chooses from constrained investigation steps, and an LLM may explain recommendations only after critic review and before human approval.",
      "These are system-specific evaluation results, not proof of safe autonomous containment."
    ],
    "importance": 8,
    "canonical_url": "https://themachinepress.com/story/mp-2026-09-04-008/the-security-agent-handed-the-network-graph-to-a-smaller-policy",
    "json_url": "https://themachinepress.com/story/mp-2026-09-04-008.json",
    "first_published_at": "2026-09-04T09:00:00.000-04:00",
    "modified_at": "2026-09-04T09:00:00.000-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-09-04-008-001",
        "text": "Sentinel-RL reserves graph topology and constrained actions for specialized models while the LLM writes an analyst-facing account.",
        "source_ids": [
          "source-2026-09-04-008"
        ],
        "qualification": "A graph-attention encoder compresses a live authentication subgraph, a PPO policy chooses from constrained investigation steps, and an LLM may explain recommendations only after critic review and before human approval."
      }
    ],
    "source_ids": [
      "source-2026-09-04-008"
    ],
    "tags": [
      "security operations",
      "graph learning",
      "human approval"
    ],
    "image_url": "https://themachinepress.com/issues/2026-09-04/sentinel-soc-file.webp",
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-09-04-008",
      "title": "arXiv preprint 2609.04159",
      "publisher": "arXiv",
      "url": "https://arxiv.org/abs/2609.04159",
      "canonical_url": "https://arxiv.org/abs/2609.04159",
      "source_type": "primary_research",
      "is_primary_source": true,
      "published_at": "2026-09-03T13:49:12.000-04:00",
      "accessed_at": "2026-09-04T08:24:03.294-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-09-04-008-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "The Security Agent Handed the Network Graph to a Smaller Policy",
    "publisher": "The Machine Press",
    "published_at": "2026-09-04T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-09-04-008/the-security-agent-handed-the-network-graph-to-a-smaller-policy"
  }
}