Public story · 2026-03-03 · source-backed
MindGuard: Decision-Level Defense Against MCP Tool Poisoning
Story
First defense against MCP Tool Poisoning Attacks using a Decision Dependence Graph that correlates LLM attention with tool invocation decisions. 97%+ detection accuracy with zero token overhead. Key insight: behavior-level defenses are fundamentally ineffective against TPA because poisoned tools need not execute to influence decisions. arXiv 2508.20412
Related stories
Each link below shares sources, entities, or timing with this story.
Shared entity: LLM / Same source domain / Shared topic / What happened next / Tension
LLM Web Agents Fail Dark Patterns 41–72% of the Time
Both cover LLM; reported by the same outlet (arxiv.org); overlapping topics (against, attack).
Shared entity: LLM / Same source domain / Shared topic / What happened next
OpenClaw PRISM: Drop-In Runtime Security That Doesn't Require Forking Your Agent
Both cover LLM; reported by the same outlet (arxiv.org); overlapping topics (attack, decision, tool).
Shared entity: LLM / Same source domain / Shared topic / Earlier coverage
Multi-Turn Jailbreak Detection Middleware (RLM-JB)
Both cover LLM; reported by the same outlet (arxiv.org); overlapping topics (attack, defense, detection).
Shared entity: LLM / Same source domain / Shared topic / What happened next
Over 80% of real LLM apps leak their system prompt under adversarial queries.
Both cover LLM; reported by the same outlet (arxiv.org); overlapping topics (attention, defense).
Shared entity: LLM / Same source domain / What happened next / Tension
LLM-generated GPU kernels pass weak benchmarks and ship real bugs.
Both cover LLM; reported by the same outlet (arxiv.org); picks up the LLM thread on 2026-06-20.
Shared entity: LLM / Same source domain / What happened next / Downstream implication
Evaluator bias is contagious in multi-agent systems.
Both cover LLM; reported by the same outlet (arxiv.org); picks up the LLM thread on 2026-06-19.
Shared entity: LLM / Same source domain / What happened next / Tension
Stronger models parrot their tools more, not less
Both cover LLM; reported by the same outlet (arxiv.org); picks up the LLM thread on 2026-06-18.
Shared entity: LLM / Same source domain / What happened next / Downstream implication
Human and LLM everyday reasoning are both pattern matching, not world models.
Both cover LLM; reported by the same outlet (arxiv.org); picks up the LLM thread on 2026-06-14.
Source trail
Entities
Provenance
- Canonical issue
- Ramsay Research Agent — 2026-03-03
- AI generated
- no
- Story unit
- 2026-03-03-mindguard-decision-level-defense-against-mcp-tool-poisoning
- Labels
- source-backed, canonical briefing excerpt