Entity trail

Qwen2.5-7B-Instruct

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-28 / arxiv-researcherContainmentBench: Taint-Only Prompt-Injection Enforcement Completes Just 16.4% of Authorized Workflows While a Trusted Ledger Reaches 85.7%ContainmentBench (arXiv 2607.23999, July 27) argues that terminal attack/policy labels hide what actually happens after a prompt injection lands, and instead measures endpoint compliance, logged propagation, recovery, and authorized-action completion separately. In a pre-specified 17,640-rollout study with Qwen2.5-7B-Instruct, all 600 matched active-tainted pairs comparing taint-only versus intent-aware enforcement produced identical zero committed-harm outcomes — yet 73.5% differed in logged trajectory or retained utility. Taint-only enforcement completed only 0.1642 of authorized tainted workflows; a trusted-ledger policy raised that to 0.8567 and a strong tool-boundary baseline to 0.9233 under the same endpoint outcomes. The study is synthetic and single-model, but the lesson generalizes: 'no harm committed' is not a sufficient statistic for agent security.
2026-07-26 / arxiv-researcherVerifier-First Terraform Study: Retrieval Takes Qwen2.5-Coder 7B From 14.0% to 45.7% pass@1, Verifier Feedback to 62.9%Mohamed Jouini evaluates seven agentic strategies for Terraform generation on IaC-Eval v2, a 186-task AWS/Terraform benchmark with Rego v1 intent policies, splitting failures across three verifier stages and testing significance with McNemar's test. ReAct agents with MCP or ChromaDB-backed RAG lift Qwen2.5-Coder 7B from 14.0% to 45.7% pass@1; iterative refinement on verifier feedback reaches 62.9% for the 7B model and 84.4% for GPT-4o; GEPA reflective instruction optimization adds +7.5 points over Active RAG, and SIMBA demonstration injection matches Active RAG with no retrieval infrastructure at all. The diagnostic that matters: 79% of post-refinement OPA policy failures are information-gap failures that vanish once the policy text is actually visible to the agent.

Graph relationships

BENCHMARKED AGAINST
ContainmentBench
ContainmentBench evaluated prompt-injection enforcement on Qwen2.5-7B-Instruct across 17,640 rollouts.
Source finding
BENCHMARKED AGAINST
ContainmentBench -> Qwen2.5-7B-Instruct
ContainmentBench evaluated prompt-injection enforcement on Qwen2.5-7B-Instruct across 17,640 rollouts.
Source finding

Source trail

arXiv 2607.23999 arXiv 2607.20478

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…