ReliHarness is presented, a self-learning dual-channel execution-layer reliability harness framework that instead probes each worker thread at a lower level through two independent checks: heartbeat timeout detection and operating system-level thread liveness detection.
Abstract
Large language model agents invoke external tools through the Model Context Protocol to perform actions beyond text generation. Once a background thread is dispatched, even the latest Model Context Protocol Tasks extension exposes only coarse-grained, self-reported task states, so a thread that deadlocks or crashes silently remains reported as working and invisible to the client, which is not acceptable in some industrial applications that need long monitoring. We present ReliHarness, a self-learning dual-channel execution-layer reliability harness framework that instead probes each worker thread at a lower level through two independent checks: heartbeat timeout detection and operating system-level thread liveness detection. The proposed framework contributes a five-state lifecycle machine, dual-channel detection, bi-layer evidence logging, a four-stage cascade pipeline, and a self-learning command-matching module. Experiments on a Phytium S5000C and Ascend 310P platform achieve 100% detection coverage for the tested crash and deadlock scenarios with zero false positives. The self-learning module expands the knowledge base and lifts matching accuracy from 74.5% to 90.2% across 102 real-world test queries. The per-task overhead is 0.004 ms, and regex responses are 670 to 63,300 times faster than large language model inference. The architecture is application and logic decoupled and deployable in Model Context Protocol-compatible systems.
This work argues that agentic risk is progressive: it can enter at four loci of the agent control loop--skill admission, invocation-time intent, execution-time effect, and post-action consequence--while a denied dangerous objective can reappear across surface forms, tools, or turns.
Kai Wang, Zeming Wei, Biaojie Zeng et al.· 0 citations
Tracekit is an open-source, dependency-free system that captures three channels for every agent session: what the human asked (intent), what the model said of its reasoning (self-report), and what it actually executed (actions).
This work evaluates three commit-time guard granularities (global epoch, read-set version, semantic commit predicate), multi-level verification, and model-side gates on three locally hosted quantized model families, and investigates how precisely runtime guards distinguish invalidating races.
Zi-Hao Zheng, Jia-Yu Long, Bai-Chuan Li et al.· 0 citations
Large language model (LLM) agents are increasingly evaluated on cybersecurity tasks such as vulnerability reproduction, exploitation, and patching. However, existing cybersecurity benchmarks predominantly operate under a post-environment evaluation paradigm, i.e., handing the agent source code, a container, or an execu...
Liang He, Sheng Wu, Hao-Miao Hao et al.· 0 citations
LLM coding agents are crossing from task-scale to project-scale: single assisted efforts that run for months, across repeated context compactions, on codebases far larger than any context window. We report operational experience from one such effort (a research project under a single continuous Claude Code session line...
ECLIPSE is a self-evolving and stealthy prompt-injection framework for long-horizon agentic systems that achieves up to 96.7% attack success without defense and 69.2% under the common safety filter, exceeding the strongest baseline by 27.5% in the defended setting.
Shi-Qian Zhao, Yang-Fan Zhou, Xin-Feng Li et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.