Improved Security Monitoring for Tool-Using AI Agents
Recent research demonstrates that current security monitors often fail by confusing injection exposure with an agent's actual commitment to perform an unsafe action. The author proposes a double-stratified evaluation method that separates exposure from behavior, significantly improving the ability to predict unsafe tool calls up to two steps in advance.