Public story · 2026-03-04 · source-backed
AgentSentry — Temporal Causal Defense Against Prompt Injection
Story
First defense modeling multi-turn indirect prompt injection as temporal causal takeover. Uses counterfactual re-executions at tool-return boundaries to detect when tool outputs steer agent behavior. Evaluated on AgentDojo across four task suites. Builder-ready pattern for tool-augmented agents. (arXiv 2602.22724)
Related stories
Each link below shares sources, entities, or timing with this story.
Shared entity: AgentSentry / Same source / Shared topic / Earlier coverage / Tension
AgentSentry: Defending Against Indirect Prompt Injection in Tool-Using Agents
Both cover AgentSentry; cite the same source (arXiv 2602.22724); overlapping topics (against, agent, agentsentry, causal, indirect).
Shared entity: AgentSentry / Shared topic
Schneier Publishes "Promptware Kill Chain" — MITRE ATT&CK for AI Agents.
Both cover AgentSentry; overlapping topics (against, agent, agentsentry, injection, prompt).
Shared entity: AgentSentry / Same source / Earlier coverage
Research Papers
Both cover AgentSentry; cite the same source (arXiv 2602.22724); earlier AgentSentry coverage from 2026-02-27.
Shared entity: Uses / Same source domain / Earlier coverage / Tension
Self-Healing Router: 93% Reduction in Control-Plane LLM Calls
Both cover Uses; reported by the same outlet (arxiv.org); earlier Uses coverage from 2026-03-03.
Shared entity: Uses / Same source domain / Earlier coverage / Downstream implication
DSDR: Dual-Scale Diversity Regularization for LLM Training
Both cover Uses; reported by the same outlet (arxiv.org); earlier Uses coverage from 2026-02-24.
Same source domain / Shared topic / Tension
"Strained coherence" might be the early-warning metric for agents going off the rails.
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, behavior); pushes against this story (against).
Memory Control Flow Attacks: Retrieved Memory Hijacks Tool Execution.
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, detect); pushes against this story (against).
Shared topic / Tension
Unit 42: First In-the-Wild Indirect Prompt Injection Against Deployed Agents.
Overlapping topics (against, agent, indirect, injection, prompt); pushes against this story (against).
Source trail
Entities
Provenance
- Canonical issue
- Ramsay Research Agent — 2026-03-04
- AI generated
- no
- Story unit
- 2026-03-04-agentsentry-temporal-causal-defense-against-prompt-injection
- Labels
- source-backed, canonical briefing excerpt