Policy dependency / Stack layer
Hierarchical Ransomware Agents Escalate to Dynamic and Memory Analysis Only on Specialist Disagreement
arXiv 2609.04820
Stack layer / Threat pattern
SBOM Tools Cover Only the First Two of Four Supply-Chain Propagation Stages
arXiv 2609.05380
Stack layer / Contrast
An injected image overwrote TOOLS.md in a default OpenClaw Discord deployment where text injection failed
arXiv 2609.04533
Policy dependency / Contrast
Joint Trust-Boundary and Credential-Derivation Design Beat Sequential Design in 195 of 230 Comparisons
arXiv 2609.04566
Stack layer / Contrast
Synthesizing tool-call training data by executing the tools first lets a 9B model nearly match a 27B one
arXiv 2609.05395
Stack layer / Contrast
An evolving skill library lifts a fixed computer-use stack 5.7 to 18.6 points, but repeated edits do not always recover the original task
arXiv
Stack layer / Threat pattern
Deleting an agent's memory record changes leakage not at all, and instruction-based forgetting fails on every probe
arXiv 2609.04875
Stack layer / Threat pattern
LLM decompiler output that recompiles and passes every shipped test still diverges on other inputs, and can silently erase a disclosed CVE
arXiv 2609.05370