An "Agent-Native Immune System" paper models defense on biology, not guardrails.

This arXiv paper proposes a taxonomy and architecture for defending agents with persistent memory, tool use, and multi-agent collaboration, framing defense as a continuously adapting layer rather than static rules. It lines up with the OWASP finding that payload filtering alone fails. I'm skeptical of biological metaphors in security, they tend to over-promise, but the underlying point is right: static guardrails lose to adaptive attackers, and runtime monitoring needs to adapt too.