Agents
PocketAgents: A Manifest-Driven Library of Autonomous Defense Agents
arXiv:2605.21694v2 Announce Type: replace-cross Abstract: Connecting large language models (LLMs) to defensive enforcement requires more than asking a model whether an attack is happening. A defender
arXiv:2605.21694v2 Announce Type: replace-cross Abstract: Connecting large language models (LLMs) to defensive enforcement requires more than asking a model whether an attack is happening. A defender must decide which model outputs may change the system state, which outputs must be rejected, and how failures should be recorded. We present PocketAgents, a manifest-driven library of autonomous defense agents. Each agent is installed as three data files: a manifest, a prompt, and a runtime context. The shared runtime gives the agent bounded telemetry access and accepts only typed reports whose requested action appears in the manifest. We implemented PocketAgents on top of Perry, a cyber-deception testbed, and evaluated two agents for the Command and Control and Exfiltration tactics in 18 closed-loop trials of a DarkSide-inspired attack on a small enterprise topology. Thirteen trials produced validated network-block actions and contained the attack; four failed schema validation; one produced a valid no-action decision. The experiments show that a typed boundary makes LLM-driven defense measurable, extensible, and attributable.
Related
- Constitutional Black-Box Monitoring for Scheming in LLM Agents
- Security Attack and Defense Strategies for Autonomous Agent Frameworks: A Layered Review with OpenClaw as a Case Study
- SysEvolve: An AI-native, safe, autonomous adversarial attack-defense co-evolutionary system
- ClawLess: A Security Model of AI Agents
Source: arXiv cs.AI | 2026-09-10