Skip to content
Oct 13 · Tuesday

All papers

Found 1 paper
Filter5

Defense type

Inference-time intervention6Detection and filtering8Instruction–data separation1Permissions and approval1Watermarking and provenance4

Attack surface / entry point

User input21Web pages and interfaces23Documents and messages15Tool responses35Tool and skill descriptions14Code repositories and dependencies4Retrieval corpus5Memory writes10Inter-agent messages5Images, audio and video1Distribution channels7

Layer

Model layer0Application layer1
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
Defense type：Instruction–data separationDefense type：Permissions and approvalAttack surface / entry point：Images, audio and videoLayer：Model layerLayer：Application layerClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2602.10915

    Blind Gods and Broken Screens: Building a Secure, Intent-Centric Mobile Agent Operating System

    Proposes Aura, which uses a trusted kernel to mediate the identity, perception, and action control of mobile agents

    arXiv
    2602.10915
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    Gemini-3-Flash
    AbstractAura mediates structured interactions via the Agent Kernel.

    Aura uses kernel-mediated structured agent interaction, replacing screen-interface mobile assistants..

    Paper analysisRead analysis
You have reached the end