Policy dependency / Stack layer
Attnlocate treats prompt injection as an object detection problem inside the attention matrix, hitting 0.934 TPR at 0.067 FPR
arXiv
Policy dependency / Stack layer
Cherry Studio v2.0.9 unifies tool approval into one declarative policy and lets the provider catalog hot-update without an app release
GitHub
Stack layer / Threat pattern
Two New Self-Hostable Git Forges Hit the HN Front Page a Week After Cursor Shipped Origin
Codefloe and github.com/tobi/walgit (via Hacker News, 2026-08-24)
Policy dependency / Stack layer
WebMCP-Phalanx blocks all 80 tool-description injections in a browser agent, then gets bypassed by a malicious tool name called before inspection
arXiv
Stack layer / Threat pattern
Microsoft's Agent Lightning v1.0.1 ships an agent skill whose job is optimizing other agents, installed through gh skill
GitHub
Policy dependency / Stack layer
A flow-centric policy language cut confirmed agent compromise from 33% to 0% on AgentDojo while raising utility
arXiv 2608.22868
Stack layer / Threat pattern
d-Matrix Raptor Claims 100 TB/s From 3D-DRAM and 20x the Bandwidth Density of HBM
ServeTheHome
Stack layer / Threat pattern
Icarus Indexes Refused Pull Requests to Answer Why Code Is the Way It Is
Icarus (via Show HN, 2026-08-25)