Chema Alonso's team proposes multi-agent fragmentation jailbreak attacks and the monitoring tool JAMON

Chema Alonso and Daniel Romero Ruiz propose a fragmentation jailbreak attack against multi-agent systems (MAS), breaking a malicious goal into multiple subtasks that are individually harmless and executed sequentially by different agents, thereby bypassing each agent's individual security judgments. The work draws an analogy to the Three Laws of Robotics from Isaac Asimov's novel "The Naked Sun," and the paper is titled "Mitigation of Fragmentation Jailbreak Attacks in Multi-Agent Systems: An Architecture Based on Global Semantic Monitoring," presented by Daniel Romero Ruiz at the IEEE CYBER-AI 2026 conference held in Bucharest in September. The authors note that such attacks are not necessarily continuous in time and may lurk for long periods interspersed with benign actions, with detection scope and cost remaining open research questions.