Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-18 · source-backed
The Agentic Principal Chain (arXiv 2608.15888) reframes prompt injection as an authorization problem: an injection only matters if the agent holds authority to act on it. Across 3,154 instances spanning InjecAgent, AgentDojo, and ASB, exfiltration hit 0% in all four AgentDojo domains and all 544 InjecAgent data-stealing cases were blocked. Intent binding cut destruction from 38.6% to 4.0% and manipulation from 90.5% to 12.1%. The honesty is what sells it: utility drops 8.6 and 13.9 percentage points across 949 task-injection pairs. That's a real trade and they published it instead of burying it.
Each link below shares sources, entities, or timing with this story.
ToolHazard supports AgentDojo / Shared entity: AgentDojo / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (ToolHazard supports AgentDojo); both cover AgentDojo; reported by the same outlet (arxiv.org).
Shared entity: AgentDojo / Same source domain / Shared topic / Earlier coverage / Tension
Both cover AgentDojo; reported by the same outlet (arxiv.org); overlapping topics (agent, agentdojo, injection).
Both cover AgentDojo; reported by the same outlet (arxiv.org); overlapping topics (agent, agentdojo).
Both cover AgentDojo; reported by the same outlet (arxiv.org); overlapping topics (agent, agentdojo).
PromptArmor benchmarked against AgentDojo / Same source domain / Shared topic
Linked by a graph relationship (PromptArmor benchmarked against AgentDojo); reported by the same outlet (arxiv.org); overlapping topics (agent, agentdojo).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, agentic, binding); pushes against this story (but).
Same source domain / Shared topic
Reported by the same outlet (arxiv.org); overlapping topics (agent, agentic, authorization, binding).
PromptArmor benchmarked against AgentDojo / Shared topic
Linked by a graph relationship (PromptArmor benchmarked against AgentDojo); overlapping topics (agent, chain).