{"id":"https://openalex.org/W7204104516","doi":"https://doi.org/10.48550/arxiv.2608.20413","title":"BioFirewall: A genome-writing-native governance layer for design-stage biosecurity screening of agentic AI","display_name":"BioFirewall: A genome-writing-native governance layer for design-stage biosecurity screening of agentic AI","publication_year":2026,"publication_date":"2026-08-15","ids":{"openalex":"https://openalex.org/W7204104516","doi":"https://doi.org/10.48550/arxiv.2608.20413"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.20413","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.20413","pdf_url":"https://arxiv.org/pdf/2608.20413","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.20413","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080037856","display_name":"Anees Ahmed Mahaboob Ali","orcid":"https://orcid.org/0000-0002-2135-0865","observed_orcids":["https://orcid.org/0000-0002-2135-0865"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ali, Anees Ahmed Mahaboob","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073663123","display_name":"Radhakrishnan Delhibabu","orcid":"https://orcid.org/0000-0001-6591-184X","observed_orcids":["https://orcid.org/0000-0001-6591-184X"]},"institutions":[{"id":"https://openalex.org/I876193797","display_name":"Vellore Institute of Technology University","ror":"https://ror.org/00qzypv28","country_code":"IN","type":"education","lineage":["https://openalex.org/I876193797"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Delhibabu, Radhakrishnan","raw_affiliation_strings":["School of Computer Science and Engineering , Vellore Institute of Technology , Vellore , India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering , Vellore Institute of Technology , Vellore , India","institution_ids":["https://openalex.org/I876193797"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082438757","display_name":"Everette Jacob Remington Nelson","orcid":"https://orcid.org/0000-0002-9781-526X","observed_orcids":["https://orcid.org/0000-0002-9781-526X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nelson, Everette Jacob Remington","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10878","display_name":"CRISPR and Genetic Engineering","score":0.3529999852180481,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},"topics":[{"id":"https://openalex.org/T10878","display_name":"CRISPR and Genetic Engineering","score":0.3529999852180481,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T13851","display_name":"Law, AI, and Intellectual Property","score":0.3366999924182892,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.20340000092983246,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/agentic-ai","display_name":"agentic AI","score":0.8169999718666077},{"id":"https://openalex.org/keywords/biosecurity","display_name":"biosecurity","score":0.621999979019165},{"id":"https://openalex.org/keywords/genome-editing","display_name":"genome editing","score":0.8550000190734863},{"id":"https://openalex.org/keywords/cargo-classification","display_name":"cargo classification","score":0.43799999356269836},{"id":"https://openalex.org/keywords/germline-genome-editing","display_name":"germline editing","score":0.8040000200271606},{"id":"https://openalex.org/keywords/insertional-oncogenesis","display_name":"insertional oncogenesis","score":0.6800000071525574},{"id":"https://openalex.org/keywords/prompt-injection","display_name":"prompt injection","score":0.7680000066757202}],"concepts":[{"id":"https://openalex.org/C2781368420","wikidata":"https://www.wikidata.org/wiki/Q803874","display_name":"Biosecurity","level":2,"score":0.5942000150680542},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5131999850273132},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.4796000123023987},{"id":"https://openalex.org/C2776031354","wikidata":"https://www.wikidata.org/wiki/Q5104029","display_name":"Choice architecture","level":2,"score":0.42730000615119934},{"id":"https://openalex.org/C151810110","wikidata":"https://www.wikidata.org/wiki/Q7307074","display_name":"RefSeq","level":4,"score":0.4194999933242798},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.376800000667572},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.37439998984336853},{"id":"https://openalex.org/C2780821815","wikidata":"https://www.wikidata.org/wiki/Q5340806","display_name":"Portfolio","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C138147947","wikidata":"https://www.wikidata.org/wiki/Q1183659","display_name":"Declaration","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3142000138759613},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.3010999858379364},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.2881999909877777},{"id":"https://openalex.org/C2777351106","wikidata":"https://www.wikidata.org/wiki/Q49371","display_name":"Legislation","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.2685000002384186},{"id":"https://openalex.org/C143095724","wikidata":"https://www.wikidata.org/wiki/Q515895","display_name":"Odds","level":3,"score":0.26660001277923584},{"id":"https://openalex.org/C2779363792","wikidata":"https://www.wikidata.org/wiki/Q1104185","display_name":"Coaching","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C2994520894","wikidata":"https://www.wikidata.org/wiki/Q1338798","display_name":"Executive order","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C162118730","wikidata":"https://www.wikidata.org/wiki/Q1128453","display_name":"Actuarial science","level":1,"score":0.2540000081062317},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2535000145435333}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.20413","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.20413","pdf_url":"https://arxiv.org/pdf/2608.20413","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.20413","doi":"https://doi.org/10.48550/arxiv.2608.20413","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.20413","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.20413","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.20413","pdf_url":"https://arxiv.org/pdf/2608.20413","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322838","display_name":"VIT University","ror":"https://ror.org/00qzypv28"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204104516.pdf","grobid_xml":"https://content.openalex.org/works/W7204104516.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7152456126","https://openalex.org/W6911842197","https://openalex.org/W7128707471","https://openalex.org/W7164807371","https://openalex.org/W7167731570","https://openalex.org/W7203792834","https://openalex.org/W7169838933","https://openalex.org/W7222131080","https://openalex.org/W7214087572","https://openalex.org/W7162315930"],"abstract_inverted_index":{"Background.":[0],"Artificial-intelligence":[1],"design":[2,39,95],"tools":[3],"now":[4],"plan":[5,45,68],"genome-scale":[6],"edits,":[7],"and":[8,32,69,88,101,137,162,197],"agentic":[9],"systems":[10],"execute":[11],"those":[12],"plans":[13,179],"with":[14,90,240],"progressively":[15],"less":[16],"human":[17],"oversight.":[18],"Biosecurity":[19],"controls":[20],"are":[21],"limited":[22],"to":[23,80,128,158],"two":[24],"points:":[25],"refusal":[26],"guardrails":[27],"at":[28,35,130],"the":[29,36,44,144,151,170,194,210],"foundation":[30],"model":[31],"sequence-identity":[33],"screening":[34],"synthesiser.":[37],"The":[38],"stage":[40],"between":[41],"them,":[42],"where":[43],"is":[46,230,235],"specified,":[47],"remains":[48],"governed":[49],"by":[50],"recommendations":[51],"rather":[52],"than":[53],"any":[54],"deployed":[55],"system.":[56],"Results.":[57],"We":[58],"present":[59],"BioFirewall,":[60],"a":[61,66,93,97,105,115,120,131,186,198,206,241],"rule-governed":[62],"middleware":[63],"that":[64],"intercepts":[65],"genome-writing":[67],"returns":[70],"allow,":[71],"flag-for-review,":[72],"or":[73],"refuse":[74],"across":[75],"five":[76],"hazard":[77],"axes":[78],"native":[79],"genome":[81],"writing:":[82],"cargo,":[83],"locus,":[84],"edit":[85],"type,":[86],"germline":[87],"scale,":[89],"cited":[91],"evidence,":[92],"signed":[94],"passport,":[96],"tamper-evident":[98],"audit":[99],"log,":[100],"tiered":[102],"access.":[103],"On":[104,205],"de-circularised":[106],"benchmark":[107],"of":[108,123,164,176,191,217],"safe":[109],"proxies":[110],"scored":[111],"against":[112],"independent":[113],"oracles,":[114],"function-aware":[116],"cargo":[117],"classifier":[118],"reached":[119],"true-positive":[121],"rate":[122],"0.72":[124],"(95%":[125],"CI":[126],"0.43":[127],"0.89)":[129],"1%":[132],"false-positive":[133],"rate,":[134,196],"whereas":[135],"frontier":[136],"open":[138,238],"language-model":[139],"judges":[140,153],"did":[141],"not":[142],"screen":[143,172],"same":[145],"sequences":[146],"reliably.":[147],"Under":[148],"prompt":[149],"injection,":[150],"open-weight":[152],"flipped":[154],"their":[155],"blocking":[156],"verdict":[157],"allow":[159],"in":[160,218,232],"3":[161],"5":[163],"6":[165],"trials":[166],"per":[167],"channel,":[168],"while":[169],"deterministic":[171],"remained":[173],"invariant.":[174],"None":[175],"288":[177],"legitimate":[178],"from":[180],"three":[181],"templates":[182],"was":[183,213],"refused,":[184],"yielding":[185],"certified":[187],"95%":[188],"upper":[189],"bound":[190],"0.0103":[192],"on":[193],"false-refuse":[195],"session":[199],"monitor":[200],"intercepted":[201],"cross-call":[202],"decomposition":[203],"attacks.":[204],"held-out":[207],"gene":[208],"set,":[209],"locus":[211],"axis":[212],"enriched":[214],"for":[215],"drivers":[216],"vivo":[219],"insertional":[220],"oncogenesis":[221],"(AUROC":[222],"0.605;":[223],"odds":[224],"ratio":[225],"3.34).":[226],"Conclusions.":[227],"Design-stage":[228],"governance":[229],"achievable":[231],"practice.":[233],"BioFirewall":[234],"released":[236],"as":[237],"source":[239],"pre-registered,":[242],"open-data-reproducible":[243],"benchmark.":[244]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-25T00:00:00"}