{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-10-09-026",
    "source_story_id": "tmp-story-orcagen-offline-defense-playbooks",
    "edition_id": "mp-2026-10-09-morning-0091",
    "edition_url": "https://themachinepress.com/edition/2026-10-09",
    "position": 15,
    "story_type": "dispatch",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "The Defense Used AI Offline and Verified Logic at Runtime",
    "slug": "the-defense-used-ai-offline-and-verified-logic-at-runtime",
    "dek": "ORCAGen builds malware-specific deception playbooks before deployment, keeping generated reasoning outside runtime enforcement.",
    "summary": "ORCAGen builds malware-specific deception playbooks before deployment, keeping generated reasoning outside runtime enforcement.",
    "body_text": "ORCAGen combines a curated knowledge base, retrieval and structured prompts to construct and test malware-specific deception strategies offline. Only verified orchestration logic is enforced at runtime. Its evaluation covered synthesized scenarios and 150 real malware samples across keyloggers, information stealers and ransomware, comparing execution, refinement effort, hallucinations, effectiveness and overhead across several models. GPT-5.5 needed the fewest refinements and had no observed hallucinated APIs in those tests; Gemini 3.5 Flash had the lowest response time and runtime overhead. Those findings are limited to the evaluated scenarios. The design puts validation between a generator’s proposal and a defense action rather than asking a model to improvise every response.",
    "why_it_matters": "ORCAGen builds malware-specific deception playbooks before deployment, keeping generated reasoning outside runtime enforcement.",
    "limitations": [
      "Only verified orchestration logic is enforced at runtime."
    ],
    "importance": 8,
    "canonical_url": "https://themachinepress.com/story/mp-2026-10-09-026/the-defense-used-ai-offline-and-verified-logic-at-runtime",
    "json_url": "https://themachinepress.com/story/mp-2026-10-09-026.json",
    "first_published_at": "2026-10-09T09:00:00.000-04:00",
    "modified_at": "2026-10-10T03:43:44.000-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-10-09-026-001",
        "text": "ORCAGen builds malware-specific deception playbooks before deployment, keeping generated reasoning outside runtime enforcement.",
        "source_ids": [
          "source-2026-10-09-015"
        ],
        "qualification": "Only verified orchestration logic is enforced at runtime."
      }
    ],
    "source_ids": [
      "source-2026-10-09-015"
    ],
    "tags": [
      "active defense",
      "offline generation",
      "runtime verification"
    ],
    "image_url": null,
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-10-09-015",
      "title": "arXiv preprint 2610.12415, original v1",
      "publisher": "arXiv / submitting research authors",
      "url": "https://arxiv.org/abs/2610.12415v1",
      "canonical_url": "https://arxiv.org/abs/2610.12415v1",
      "source_type": "primary_research",
      "is_primary_source": true,
      "published_at": "2026-10-08T13:51:11.000-04:00",
      "accessed_at": "2026-10-10T03:27:42.309-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-10-09-026-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "The Defense Used AI Offline and Verified Logic at Runtime",
    "publisher": "The Machine Press",
    "published_at": "2026-10-09T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-10-09-026/the-defense-used-ai-offline-and-verified-logic-at-runtime"
  }
}