ActionBench: unauthorized actions in tool-using agents
How often agents call tools, move data, or cross boundaries they were never allowed to cross.
Research
The systems, methods, and experiments that shape how we build and safeguard AI products.
Read
On the effectiveness of runtime policy enforcement for LLM agents
Precision, recall, and side effects of allow, review, and block decisions before a tool call executes.
Preprint · Security
Coming soon
When allowlists fail: authorization gaps in tool-using agents
Where prompt filters and tool allowlists miss confused-deputy, injection, and multi-step attacks.
Infrastructure
Coming soon
Conversational latency of action-level policy decisions
Added delay, timeout behavior, and the point at which teams disable enforcement.
Systems
Coming soon
Interruptibility: calibrating human approval for high-impact agent actions
When to pause a session, what evidence to show, and how review load scales.