Arxiv paper on IFC for smart contracts with off-chain components, showing even loop-free code can block and spoil the model, naturally.
trending2
01 02 SPA: Securing Persistent LLM Agents Across Queries with Plan-First Information-Flow Control arxiv.orgCan a plan-first IFC lattice keep a persistent LLM agent from smearing untrusted inputs across queries?