Mako: A 'Self-Evolving Agentic OS' That Writes New Exploits Against Live Targets and Hot-Loads Them Into Itself

arXiv·medium signal

The authors introduce the Self-Evolving Agentic Operating System (SE-AOS), a class of security agent that treats exploit capability as a mutable, versioned kernel it extends at runtime — observing its own failures, synthesizing new capabilities, proving them against a live target, then hot-loading them back into itself. Mako is the first SE-AOS instance, an autonomous web-exploitation engine built within the LaunchSafe project for continuous offensive security. It's a notable escalation in autonomous offensive tooling that defenders and agent-builders should track for the dual-use implications.