From Prompt Injection to Persistent Control: Defending Agentic Harness Against Trojan Backdoors
arXiv:2605.31042v1 Announce Type: cross Abstract: LLM agents are evolving from conversational chatbots to operational tools in real-world workspaces. In local agentic harnesses, an LLM can read and wr