Reproduce “From Attack Surface to Defense Architecture: Compositional Security for Agentic Coding Harnesses” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Simon Hegelich, Bardh Prenkaj, Habiba Sarhan, Morteza Shahrezaye, Kolja Hegelich, Christian Montag, Ralf Schneider, Erik Cambria
ActiveSecHarness places a deterministic reference monitor between coding agents and operating-system tools. Ring 0 checks permissions and data flow across agents, files, processes, and network access. On a 252-fixture suite, it denied all 132 attack-labeled cases and none of 120 benign cases, while a qwen3:4b judge denied 118 benign cases. These results concern structured fixtures, not universal protection.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.