Tool identity is linearly readable from the residual stream of a fully-open base model, even when generation failsAugust 28, 2026 · preprint · ZenodoJust, PavolRead abstract ↓
Authorization Logs Are Not Compliance Evidence: The Article 9 Gap in Agent Harness SecurityAugust 28, 2026 · preprint · ZenodoJust, PavolRead abstract ↓