{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-11-12-017",
    "source_story_id": "tmp-brief-agentic-harness-defense",
    "edition_id": "mp-2026-11-12-morning-0125",
    "edition_url": "https://themachinepress.com/edition/2026-11-12",
    "position": 19,
    "story_type": "ticker",
    "section": "safety-security",
    "editorial_classification": "editorial",
    "headline": "The Coding Harness Gets a Reference Monitor",
    "slug": "the-coding-harness-gets-a-reference-monitor",
    "dek": "ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.",
    "summary": "ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.",
    "body_text": "The proposed security architecture separates model intelligence from authority and tracks both trust and sensitivity across tool use and files. On 252 constructed fixtures, its deterministic guard blocked every attack with no reported benign false positives, while a local model judge refused most benign work; the evidence is from the authors' fixture suite, not a production deployment.",
    "why_it_matters": "ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.",
    "limitations": [
      "On 252 constructed fixtures, its deterministic guard blocked every attack with no reported benign false positives, while a local model judge refused most benign work; the evidence is from the authors' fixture suite, not a production deployment."
    ],
    "importance": 7,
    "canonical_url": "https://themachinepress.com/story/mp-2026-11-12-017/the-coding-harness-gets-a-reference-monitor",
    "json_url": "https://themachinepress.com/story/mp-2026-11-12-017.json",
    "first_published_at": "2026-11-12T09:00:00.000-05:00",
    "modified_at": "2026-11-12T09:00:00.000-05:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-11-12-017-001",
        "text": "ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.",
        "source_ids": [
          "source-2026-11-12-019"
        ],
        "qualification": "On 252 constructed fixtures, its deterministic guard blocked every attack with no reported benign false positives, while a local model judge refused most benign work; the evidence is from the authors' fixture suite, not a production deployment."
      }
    ],
    "source_ids": [
      "source-2026-11-12-019"
    ],
    "tags": [
      "agents",
      "coding",
      "security",
      "capabilities"
    ],
    "image_url": null,
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-11-12-019",
      "title": "arXiv:2611.13960v1",
      "publisher": "arXiv / Cornell University",
      "url": "https://arxiv.org/abs/2611.13960v1",
      "canonical_url": "https://arxiv.org/abs/2611.13960v1",
      "source_type": "primary_research",
      "is_primary_source": true,
      "published_at": "2026-11-10T06:52:40.000-05:00",
      "accessed_at": "2026-11-12T08:24:40.465-05:00",
      "supports_claim_ids": [
        "claim-mp-2026-11-12-017-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "The Coding Harness Gets a Reference Monitor",
    "publisher": "The Machine Press",
    "published_at": "2026-11-12T09:00:00.000-05:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-11-12-017/the-coding-harness-gets-a-reference-monitor"
  }
}