{"id":"https://openalex.org/W7225769443","doi":"https://doi.org/10.5281/zenodo.24146344","title":"ThoxShield: Bloat-Capped Counter-REA Defense for Local-First AI Artifacts","display_name":"ThoxShield: Bloat-Capped Counter-REA Defense for Local-First AI Artifacts","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225769443","doi":"https://doi.org/10.5281/zenodo.24146344"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24146344","doi":"https://doi.org/10.5281/zenodo.24146344","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24146344","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24146344","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160324705","display_name":"Craig Ross","orcid":"https://orcid.org/0009-0005-9872-3673","observed_orcids":["https://orcid.org/0009-0005-9872-3673"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ross, Craig","raw_affiliation_strings":["THOX.ai"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"THOX.ai","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5160373893","display_name":"Tommy Xaypanya","orcid":"https://orcid.org/0009-0000-4425-9565","observed_orcids":["https://orcid.org/0009-0000-4425-9565"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xaypanya, Tommy","raw_affiliation_strings":["THOX.ai"],"raw_orcid":"https://orcid.org/0009-0000-4425-9565","affiliations":[{"raw_affiliation_string":"THOX.ai","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8496000170707703,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8496000170707703,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.05040000006556511,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.9514999985694885},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6406000256538391},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.3921999931335449},{"id":"https://openalex.org/C197781089","wikidata":"https://www.wikidata.org/wiki/Q575650","display_name":"Rust (programming language)","level":2,"score":0.35089999437332153},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.34360000491142273},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.3431999981403351},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3215000033378601},{"id":"https://openalex.org/C175309249","wikidata":"https://www.wikidata.org/wiki/Q725864","display_name":"Pipeline transport","level":2,"score":0.31360000371932983},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.30239999294281006},{"id":"https://openalex.org/C164614171","wikidata":"https://www.wikidata.org/wiki/Q5204775","display_name":"DECIPHER","level":2,"score":0.2671999931335449}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24146344","doi":"https://doi.org/10.5281/zenodo.24146344","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24146344","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24146345","doi":"https://doi.org/10.5281/zenodo.24146345","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24146345","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24146344","doi":"https://doi.org/10.5281/zenodo.24146344","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24146344","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Autonomous":[0],"reverse-engineering":[1],"agents":[2],"(REAs)":[3],"\u2014":[4,14,92,110,149,166,268,274],"LLM-driven":[5],"pipelines":[6],"that":[7,96,111,355],"unpack,":[8],"index,":[9],"and":[10,36,46,81,94,105,143,161,167,206,213,234,290,340,369,432],"summarize":[11],"shipped":[12,470],"artifacts":[13],"have":[15,314],"collapsed":[16],"the":[17,58,136,179,237,276,311,324,351,356,366,373,376,386,417,469,484],"cost":[18,107,140,146],"of":[19,122,181,254,375],"cloning":[20],"unprotected":[21],"software:":[22],"a":[23,26,54,63,73,119,127,162,175,197,203,210,222,259,283,288,320,401,444,458],"model":[24],"file,":[25],"WebAssembly":[27,84],"module,":[28],"or":[29,184],"an":[30,82,215,279],"application":[31],"bundle":[32],"can":[33,364],"be":[34],"inventoried":[35],"reconstructed":[37],"for":[38],"cents.":[39],"Counter-REA":[40],"tools":[41],"answer":[42],"by":[43,169,231,252],"poisoning,":[44],"exhausting,":[45],"entangling":[47],"artifacts,":[48],"but":[49],"their":[50],"strongest":[51],"settings":[52],"exact":[53],"heavy":[55],"toll":[56,112],"on":[57,443,483],"defender:":[59],"in":[60,214,236,263,301,335,468],"our":[61,336],"measurements,":[62],"current":[64],"open-source":[65],"counter-REA":[66,123,387],"tool":[67],"at":[68,156],"its":[69],"default":[70],"intensity":[71],"grows":[72],"93-byte":[74],"JavaScript":[75],"fixture":[76,85,485],"to":[77,86,98,171,186,196,202,209,297,362,457,480],"133,951":[78],"bytes":[79,195,201,208,233,455],"(1,440\u00d7)":[80],"8-byte":[83],"3,873,169":[87],"bytes.":[88],"For":[89],"local-first":[90],"products":[91],"applications":[93],"models":[95],"ship":[97],"user":[99],"devices,":[100],"where":[101],"download":[102],"size,":[103],"storage,":[104],"update":[106],"are":[108,250],"user-facing":[109],"is":[113,141,147,329,360],"often":[114],"unacceptable.":[115],"We":[116,344],"present":[117],"ThoxShield,":[118],"bloat-capped":[120],"subset":[121],"defense":[124,277,399],"implemented":[125],"as":[126,278,309,342,347],"single":[128],"zero-dependency":[129],"Rust":[130],"binary":[131,471],"(481,568":[132],"bytes).":[133],"ThoxShield":[134,256,346,424],"keeps":[135],"mechanisms":[137],"whose":[138,144,358],"analyzer":[139,159],"high":[142],"byte":[145,244,402],"low":[148],"self-identifying":[150],"canary":[151],"metadata,":[152],"metadata-nesting":[153],"breakers":[154],"aimed":[155],"REA's":[157],"published":[158],"budgets,":[160],"SHA-256":[163],"origin":[164],"binding":[165],"refuses,":[168],"construction,":[170],"add":[172],"more":[173],"than":[174],"configurable":[176],"cap":[177],"(default:":[178],"larger":[180],"4":[182],"KiB":[183],"5%)":[185],"any":[187],"artifact.":[188],"On":[189],"reference":[190,238],"fixtures":[191],"it":[192,307],"adds":[193],"746":[194],"GGUF":[198,226,239],"model,":[199,205],"578":[200],"Safetensors":[204],"303":[207],"WASM":[211,459],"module;":[212],"independent":[216],"virtual":[217,418],"test":[218,419],"lab":[219,420],"(Section":[220],"7)":[221],"production":[223,445],"380":[224,446],"MB":[225,447],"with":[227,241,282,372],"290":[228,449],"tensors":[229],"grew":[230],"736":[232],"re-loaded":[235],"reader":[240],"every":[242,298],"tensor":[243],"stream":[245],"identical.":[246],"Because":[247],"modern":[248],"releases":[249],"produced":[251],"teams":[253],"agents,":[255],"also":[257],"ships":[258],"lightweight":[260],"loop":[261,281,408,474,479],"harness":[262,409],"which":[264],"five":[265],"generic":[266],"roles":[267],"coordinator,":[269],"auditor,":[270],"hardener,":[271],"verifier,":[272],"reporter":[273],"run":[275,318],"auditable":[280],"hard":[284],"separation":[285],"between":[286],"producing":[287],"shield":[289],"verifying":[291],"it.":[292],"One":[293],"disclosure":[294],"belongs":[295],"next":[296],"effectiveness":[299],"statement":[300],"this":[302],"paper,":[303],"so":[304,354],"we":[305,370],"make":[306],"here":[308],"well:":[310],"lite":[312],"shields":[313,482],"not":[315,427],"yet":[316],"been":[317],"against":[319,332],"live":[321],"REA":[322],"pipeline;":[323],"analyzer-budget":[325],"evidence":[326],"behind":[327],"them":[328],"upstream-empirical":[330],"(BLA,":[331],"REA)":[333],"and,":[334],"own":[337],"lab,":[338],"simulated":[339],"labeled":[341],"such.":[343],"release":[345],"open":[348],"source":[349],"under":[350,400],"MIT":[352],"License":[353],"community":[357],"software":[359],"exposed":[361],"REAs":[363],"apply":[365],"same":[367],"protections,":[368],"close":[371],"limits":[374],"approach,":[377],"stated":[378],"plainly.":[379],"Contents":[380],"1.":[381],"Introduction":[382],"\u00b7":[383,390,396,404,410,413,421,429,435,438],"2.":[384],"Background:":[385],"mechanism":[388],"set":[389],"3.":[391],"The":[392,406],"bloat":[393],"problem,":[394],"measured":[395],"4.":[397],"Design:":[398],"budget":[403],"5.":[405],"agent-team":[407],"6.":[411],"Evaluation":[412],"7.":[414],"Independent":[415],"validation:":[416],"8.":[422],"What":[423],"deliberately":[425],"does":[426],"do":[428],"9.":[430],"Limitations":[431],"future":[433],"work":[434],"10.":[436],"Conclusion":[437],"References":[439],"+736":[440],"B":[441,454,462],"growth":[442],"GGUF,":[448],"tensors,":[450],"reader-verified":[451],"MEASURED":[452,464,472,487],"+303":[453],"added":[456],"module":[460],"(31":[461],"fixture)":[463],"0":[465],"external":[466],"dependencies":[467],"1":[473],"/":[475],"10.1":[476],"ms":[477],"team":[478],"verified":[481],"tree":[486]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}