Tag
This paper presents ElephantAgent, a protocol that enforces Contextual State Continuity to defend against contextual state poisoning in agentic systems, using replicated trusted hardware and historical traceability.
A discussion about the lack of vetting for MCP servers before installation, highlighting a study that found 5.5% tool-poisoned and 14.4% with known bugs, plus a systemic RCE in the MCP SDK.