From Capability to Assurance in Autonomous Penetration-Testing Harnesses: A Framework and Reference Implementation.

arXiv:2609.22664v1 Announce Type: cross Abstract: Research on large language model agents for penetration testing is evaluated almost entirely by capability: whether the agent captures a flag or reproduces a proof of concept. That metric suits a benchmark but