Policy dependency / Stack layer
Agentic Settlement Protocol Adds Escrow and Three Deadlines Because x402's Atomic Payment Fails Real Commerce
arXiv 2609.02208
Policy dependency / Contrast
CORAL Puts an LLM Agent in a Live Closed Loop on Production Recommenders and Wins Two A/B Tests
arXiv 2609.02730
Threat pattern / Contrast
Labeling data PUBLIC - OK TO SHARE made Claude Sonnet 5 leak record values verbatim in all 10 test scenarios
arXiv 2609.01693
Policy dependency / Stack layer
Co-evolving the harness alongside the policy cut AgentDojo attack success 3x while raising benign utility
arXiv 2609.02786
Stack layer / Update thread
The Near-Optimal SFT-to-RL Budget Split Is Wide and Transfers From Small Proxy Models to Large Targets
arXiv 2609.01573
Stack layer / Contrast
mzCache Cuts On-Device LLM Time-to-First-Token 2.1-5.5x When the OS Evicts Model Memory
arXiv 2609.01338
Stack layer / Contrast
Folding an agent's trace into typed run state answers monitoring questions at 0.86 accuracy where raw-trace reading gets 0.48
arXiv 2609.01466
Policy dependency / Stack layer
Typed Provenance Guardrails Block All 19 Unsafe Releases From a Persistent Agent's Autobiographical Memory
arXiv 2609.02127