safety security
The Coding Harness Gets a Reference Monitor
ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.
Summary
ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.
The proposed security architecture separates model intelligence from authority and tracks both trust and sensitivity across tool use and files. On 252 constructed fixtures, its deterministic guard blocked every attack with no reported benign false positives, while a local model judge refused most benign work; the evidence is from the authors' fixture suite, not a production deployment.
Why it matters
ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.
Limits and context
- On 252 constructed fixtures, its deterministic guard blocked every attack with no reported benign false positives, while a local model judge refused most benign work; the evidence is from the authors' fixture suite, not a production deployment.
Key claims
ActiveSecHarness composes capability tokens, taint tracking and deterministic operating-system guards.
Qualification: On 252 constructed fixtures, its deterministic guard blocked every attack with no reported benign false positives, while a local model judge refused most benign work; the evidence is from the authors' fixture suite, not a production deployment.
Evidence: source-2026-11-12-019
Sources
- arXiv:2611.13960v1arXiv / Cornell University · primary research
Corrections
No corrections have been recorded for this story.