Fetching from the wire…
01
02
03
04
05
06
07
08
Skills2026-08-10 · source-backed
The hardware keystore paper drove key-exfiltration success from 19.3% to 0% across four models and 12 injection scenarios by putting a hardware execution boundary at the end of a five-layer chain that returns only opaque result handles. You don't need an HSM to apply the principle: any indirection where the agent invokes a capability it cannot read gets you most of the way there.
Each link below shares sources, entities, or timing with this story.
Shared entity: HSM / Same source / Shared topic
Both cover HSM; cite the same source (hardware keystore paper); overlapping topics (agent, boundary, capability, drove, hardware).
Shared entity: HSM / Same source / Shared topic / Earlier coverage
Both cover HSM; cite the same source (hardware keystore paper); overlapping topics (agent, boundary, handl, injection).
Shared entity: Give / Same source domain / Earlier coverage / Tension
Both cover Give; reported by the same outlet (arxiv.org); earlier Give coverage from 2026-08-03.
Both cover Give; reported by the same outlet (arxiv.org); earlier Give coverage from 2026-07-13.
Same source domain / Shared topic / Tension / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (agent, cannot); pushes against this story (but).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, cannot, execution); pushes against this story (against).
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (agent, capability, chain); traces where this leads (downstream).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, apply, injection); pushes against this story (against).