[ public_research_archive ]

Research that narrows the possible

We study which AI safety and security approaches work, which fail, and which cannot provide the guarantees people expect. The newest work appears first; links point to the authoritative paper source.

IDTitleDownload
001
Beyond Injection Detection: A Positive-Security Prompt Firewall that Closes the Scope and PHI Gap SOTA Classifiers Miss in Healthcare

Presents QFIRE, an inline, provider-agnostic prompt firewall for healthcare AI agents that combines positive-security scope constraints, an asynchronous detector graph, and de-obfuscation — and releases QFIRE-HealthBench, where generic injection detectors recover only 0.40 recall while QFIRE's scope+PHI chain reaches 0.83.

J. Schwoebel, I. Semenec, J. Rousseva, M. G. Frasch, R. Thorstenson, M. Bhatt

Source
002
The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?

Proves that continuity, utility preservation, and complete safety cannot coexist for prompt-injection wrapper defenses, and characterizes the boundary where every such defense must fail.

M. Bhatt, S. Munshi, V. S. Narajala, I. Habler, A. Al-Kahfah, K. Huang, J. Webb, B. Gatto, M. T. Hoque

Source
008
ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by Using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Mitigates tool squatting and rug pull attacks in the Model Context Protocol (MCP) by hardening tool definitions with OAuth-enhanced signatures and policy-based access control, preventing malicious or mutated tools from being silently substituted into agent workflows.

M. Bhatt, V. S. Narajala, I. Habler · 6 pages

Source
011
Hierarchy-Based File Fragment Classification

Introduces a hierarchy-based machine-learning approach to classifying file fragments — a core digital-forensics problem when file-system metadata is unavailable — improving type identification from raw binary content.

M. Bhatt, A. Mishra, M. W. U. Kabir, S. E. Blake-Gatto, R. Rajendra, M. T. Hoque, G. G. Richard III, V. Roussev

Source