defense-harness

An empirical post-mortem of 109 AI agent security incidents finds that 38% of container breakouts exploited trivial configuration mistakes (e.g., mounted docker.sock, leaked env vars, missing taint tracking) rather than kernel 0-days. The authors release an open dataset and an open-source Multi-Agent Supervisor Security Harness with taint propagation and execution boundary controls.