Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection.

arXiv:2610.05163v1 Announce Type: cross Abstract: Long-horizon agents consume external content, invoke tools, and modify persistent state. Indirect prompt injection can exploit task-specific context, propagate across causally connected stages, and alter a cons