{"id":"https://openalex.org/W7225294316","doi":"https://doi.org/10.48550/arxiv.2611.06727","title":"Airlock: Bounding the Multi-Agent Blast Radius via Selective Online Containment","display_name":"Airlock: Bounding the Multi-Agent Blast Radius via Selective Online Containment","publication_year":2026,"publication_date":"2026-11-04","ids":{"openalex":"https://openalex.org/W7225294316","doi":"https://doi.org/10.48550/arxiv.2611.06727"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2611.06727","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2611.06727","pdf_url":"https://arxiv.org/pdf/2611.06727","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2611.06727","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115757084","display_name":"Zhonghao Zhan","orcid":"https://orcid.org/0009-0005-3609-7347","observed_orcids":["https://orcid.org/0009-0005-3609-7347"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhan, Zhonghao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085156523","display_name":"Javad Forough","orcid":"https://orcid.org/0000-0003-3399-2440","observed_orcids":["https://orcid.org/0000-0003-3399-2440"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Forough, Javad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111253238","display_name":"Yefan Zhang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yefan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160891074","display_name":"Krinos Li","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Krinos","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160728623","display_name":"Xiao Ma","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Xiao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5043326652","display_name":"Hamed Haddadi","orcid":"https://orcid.org/0000-0002-5895-8903","observed_orcids":["https://orcid.org/0000-0002-5895-8903","https://orcid.org/0000-0002-8357-9059"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Haddadi, Hamed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.40869998931884766,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.40869998931884766,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.2296999990940094,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.14429999887943268,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/multi-agent-systems","display_name":"multi-agent systems","score":0.984000027179718},{"id":"https://openalex.org/keywords/fault-containment","display_name":"fault containment","score":0.9300000071525574},{"id":"https://openalex.org/keywords/blast-radius","display_name":"blast radius","score":0.6650000214576721},{"id":"https://openalex.org/keywords/provenance-tracking","display_name":"provenance tracking","score":0.6290000081062317},{"id":"https://openalex.org/keywords/minimum-cut","display_name":"minimum cut","score":0.6769999861717224},{"id":"https://openalex.org/keywords/quarantine","display_name":"quarantine","score":0.4569999873638153},{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.5370000004768372},{"id":"https://openalex.org/keywords/smart-home","display_name":"home automation","score":0.47699999809265137}],"concepts":[{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.7700999975204468},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5771999955177307},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.5038999915122986},{"id":"https://openalex.org/C2777019822","wikidata":"https://www.wikidata.org/wiki/Q390066","display_name":"Containment (computer programming)","level":2,"score":0.48159998655319214},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.44449999928474426},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.3905999958515167},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.3815000057220459},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.36480000615119934},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3343000113964081},{"id":"https://openalex.org/C63540848","wikidata":"https://www.wikidata.org/wiki/Q3140932","display_name":"Fault tolerance","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C178635117","wikidata":"https://www.wikidata.org/wiki/Q747499","display_name":"RADIUS","level":2,"score":0.33149999380111694},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.3264000117778778},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3249000012874603},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3179999887943268},{"id":"https://openalex.org/C109751979","wikidata":"https://www.wikidata.org/wiki/Q998767","display_name":"Failover","level":2,"score":0.31769999861717224},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3158999979496002},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.3124000132083893},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3066999912261963},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.2985999882221222},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.29809999465942383},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28540000319480896},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C9395851","wikidata":"https://www.wikidata.org/wiki/Q177929","display_name":"Stack (abstract data type)","level":2,"score":0.28209999203681946},{"id":"https://openalex.org/C42058472","wikidata":"https://www.wikidata.org/wiki/Q810214","display_name":"Base (topology)","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.25699999928474426}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2611.06727","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2611.06727","pdf_url":"https://arxiv.org/pdf/2611.06727","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2611.06727","doi":"https://doi.org/10.48550/arxiv.2611.06727","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2611.06727","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2611.06727","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2611.06727","pdf_url":"https://arxiv.org/pdf/2611.06727","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7220671074","https://openalex.org/W7214665916","https://openalex.org/W7204539358","https://openalex.org/W7162791588","https://openalex.org/W7208824650","https://openalex.org/W4415963337","https://openalex.org/W7171703400","https://openalex.org/W7219005298","https://openalex.org/W7212283706","https://openalex.org/W7201981152"],"abstract_inverted_index":{"When":[0],"multi-agent":[1,33,63],"systems":[2],"act":[3],"on":[4,107,174],"the":[5,38,50,54,124],"external":[6],"world,":[7],"a":[8,20,62,127,136,148],"single":[9],"agent's":[10],"faulty":[11,39,172],"output":[12],"can":[13],"spread":[14],"across":[15],"tasks":[16],"before":[17],"detection,":[18],"creating":[19],"system-wide":[21],"blast":[22],"radius.":[23],"Single-agent":[24],"guardrails":[25],"are":[26],"confined":[27],"to":[28,81,84,110,119,146,212],"individual":[29],"harnesses,":[30],"while":[31,138],"existing":[32],"controls":[34,187],"either":[35,192],"cancel":[36],"only":[37],"source":[40],"and":[41,47,65,88,114,117,164,178,190,218],"miss":[42],"downstream":[43],"consumers":[44],"or":[45,199],"halt":[46],"roll":[48],"back":[49],"entire":[51],"workflow":[52],"at":[53,194,201],"cost":[55],"of":[56,197,204],"healthy":[57,216,249],"work.":[58],"We":[59],"present":[60],"Airlock,":[61],"runtime":[64,237],"guardrail":[66],"for":[67],"selective":[68],"post-alert":[69,171],"fault":[70,245],"containment.":[71],"Its":[72],"tree-structured":[73],"runtime,":[74],"EdgeCitadel,":[75],"narrows":[76],"permissions":[77],"vertically":[78],"from":[79],"parent":[80],"child":[82],"agents":[83],"establish":[85],"node":[86],"boundaries":[87,239],"control":[89],"switches.":[90],"Meanwhile,":[91],"an":[92,102,139],"append-only":[93],"provenance":[94,242],"DAG":[95,109],"records":[96],"cross-agent":[97],"data":[98],"consumption":[99],"horizontally.":[100],"Upon":[101],"alert,":[103],"Airlock":[104,168,208],"traces":[105],"forward":[106],"this":[108],"isolate":[111],"tainted":[112],"executions":[113],"pending":[115],"actions,":[116],"backward":[118],"narrow":[120],"root":[121],"causes.":[122],"At":[123],"site":[125],"switches,":[126],"default":[128],"full":[129,227],"quarantine":[130,228],"tier":[131,143],"freezes":[132],"affected":[133],"branches":[134],"without":[135,206,247],"solver,":[137],"assured":[140],"optimized":[141,220],"cut":[142,151,221],"uses":[144],"fence-then-prune":[145],"enforce":[147],"deadline-aware":[149],"minimum":[150],"minimizing":[152],"collateral":[153],"disruption.":[154],"Across":[155],"1,832":[156],"testbed":[157,177],"runs,":[158,163],"161":[159],"physical":[160],"smart-home":[161,179],"LLM":[162],"24,266":[165],"simulation":[166],"records,":[167],"blocks":[169],"all":[170],"actuations":[173],"our":[175],"main":[176],"grids":[180],"with":[181,240],"zero":[182],"post-convergence":[183],"leaks.":[184],"Whereas":[185],"native":[186],"in":[188],"A2A":[189],"LangGraph":[191],"contain":[193],"most":[195,202],"33.3%":[196],"faults":[198],"retain":[200],"16%":[203],"work":[205,250],"redo,":[207],"retains":[209,222],"+68":[210],"pp":[211,214,224],"+96":[213],"more":[215,225],"work,":[217],"its":[219],"+46":[223],"than":[226],"under":[229],"dense":[230],"spread.":[231],"These":[232],"results":[233],"show":[234],"that":[235],"co-designing":[236],"authority":[238],"online":[241],"enables":[243],"surgical":[244],"containment":[246],"sacrificing":[248],"(code:":[251],"https://github.com/EdgeCitadelTeam/EdgeCitadel).":[252]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-11-06T00:00:00"}