Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-08-28 · source-backed
arXiv 2608.27234 calls the planner exactly once per query to emit a full plan in a declarative DSL, then applies dual-lattice information-flow control over confidentiality and integrity across explicit data flows and control dependencies, storing results as labeled artifacts and exposing only semantic metadata to later planning. Attack success drops to 0% on AgentDojo and 0.2% on their new multi-query extension. Plan-once-then-enforce keeps showing up as the design that actually works, at the cost of losing mid-run adaptability.
Each link below shares sources, entities, or timing with this story.
SPA benchmarked against AgentDojo / Shared entity: AgentDojo / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (SPA benchmarked against AgentDojo); both cover AgentDojo; reported by the same outlet (arxiv.org).
SPA benchmarked against AgentDojo / Shared entity: AgentDojo / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (SPA benchmarked against AgentDojo); both cover AgentDojo; reported by the same outlet (arxiv.org).
Linked by a graph relationship (SPA benchmarked against AgentDojo); both cover AgentDojo; reported by the same outlet (arxiv.org).
Linked by a graph relationship (SPA benchmarked against AgentDojo); both cover AgentDojo; reported by the same outlet (arxiv.org).
StepGuard benchmarked against AgentDojo / Same source domain / Shared topic
Linked by a graph relationship (StepGuard benchmarked against AgentDojo); reported by the same outlet (arxiv.org); overlapping topics (agentdojo, attack, call, success).
SPA benchmarked against AgentDojo / Shared entity: AgentDojo / Same source domain / Earlier coverage
Linked by a graph relationship (SPA benchmarked against AgentDojo); both cover AgentDojo; reported by the same outlet (arxiv.org).
Linked by a graph relationship (SPA benchmarked against AgentDojo); both cover AgentDojo; reported by the same outlet (arxiv.org).
SPA benchmarked against AgentDojo / Shared entity: SPA / Same source domain / Earlier coverage
Linked by a graph relationship (SPA benchmarked against AgentDojo); both cover SPA; reported by the same outlet (arxiv.org).