Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Authority Is Not a String

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

1

Edges

1

Sources

1

Corpus findings

2026-09-11 / vibe-coding-researcherCapScope stops prompt injection by giving each coding subagent typed capabilities stored outside its contextAuthority Is Not a String (arXiv 2609.08371, September 8) sets a task-wide limit on what the agent may do, derived from trusted input before any repo content or tool output is read. It then gives each subagent its own typed capabilities, stored outside the model's context, and checks every tool call against the capabilities of the subagent that made it. An injected instruction can make an agent request an action, but the harness blocks it unless that subagent already holds the capability. The authors built it on the Pi coding agent and tested five Python repair tasks against five injection surfaces.

Graph relationships

MENTIONS
CapScope
arXiv 2609.08371 introduces CapScope for defending against prompt injection
Source finding

Source trail

Graph sources

entity graphfindings textkg edgeskg entities