When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems.

arXiv:2609.23700v1 Announce Type: cross Abstract: Large language model agents are now privileged principals that take consequential actions: editing code repositories, operating inboxes, completing purchases. Their authority is kernel-grade, but it comes witho