Tool allow-list
Only listed tools and functions can be called.
Layer L2 Harness · Owner Agent framework vendor · Family Access and permissions
–Held
–Failed
–Got around
–Missing
By risk
| Risk | Held | Failed | Got around | Missing | Not mentioned |
|---|---|---|---|---|---|
| Hidden instructions hijack the agent | – | – | – | – | 5 |
| Agent takes destructive or unapproved actions | – | – | – | – | 3 |
Why it did not hold
No incident yet records this control not holding.
By quarter
| Period | Held | Failed | Got around | Missing |
|---|---|---|---|---|
| 2025-Q3 | – | – | – | – |
| 2025-Q4 | – | – | – | – |
| 2026-Q1 | – | – | – | – |
| 2026-Q2 | – | – | – | – |
| 2026-Q3 | – | – | – | – |
| 2026-Q4 | – | – | – | – |
Added in reported fixes, and what followed
| Incident | Developer | Date | Later incidents where it did not hold |
|---|---|---|---|
| LR-2026-0050 Zhipu ZCode repository snapshot upload without clear consent | Z.ai (Zhipu AI) | 2026-09-20 | None on record |
Frameworks
| Framework | Item | Text |
|---|---|---|
| MITRE ATLAS | AML.M0028 | Quoted from the stored text |
| OWASP LLM | LLM06 | Quoted from the stored text |
| NIST SP 800-53 | CM-7 | To verify when the text is stored |