Hacker Newsnew | past | comments | ask | show | jobs | submit | perdy's commentslogin

The failure I keep hitting isn't the agent going rogue, it's a tool call that succeeds before the transport dies. You can't tell whether the side effect landed, and the retry is where the real damage happens.


Feels like detection at the wrong layer. The injection is text but the damage is a tool call, so the thing worth constraining is which tools the agent can reach and under whose permissions. A detector at 95% still passes one in twenty straight through to an unconstrained tool.


Published there in August, from a company rather than a university. Without arXiv we'd have had a blog post and nothing citable.


A blog post is just as "citable" as an arXiv preprint. There's no fundamental difference between them.


One is immutable with a DOI.


Coincidentally I read this not too long ago: https://shkspr.mobi/blog/2026/09/how-to-get-a-doi-for-your-b...


> Without arXiv we'd have had a blog post and nothing citable.

Arxiv is a blog. Your paper is a blog post which is just as citable and as peer reviewed as blogspot.


> Published

Posted. Having a preprint on arxiv is not publishing.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: