{"id":"https://openalex.org/W7166669739","doi":"https://doi.org/10.48550/arxiv.2606.30555","title":"Linguistic Firewall: Geometry as Defense in Multi-Agent Systems Routing","display_name":"Linguistic Firewall: Geometry as Defense in Multi-Agent Systems Routing","publication_year":2026,"publication_date":"2026-06-29","ids":{"openalex":"https://openalex.org/W7166669739","doi":"https://doi.org/10.48550/arxiv.2606.30555"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.30555","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.30555","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.30555","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139700446","display_name":"Dvir Alsheich","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alsheich, Dvir","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139650781","display_name":"Adar Peleg","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peleg, Adar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066409021","display_name":"Ben Hagag","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hagag, Ben","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116293067","display_name":"Rom Himelstein","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Himelstein, Rom","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049478018","display_name":"Amit Levi","orcid":"https://orcid.org/0000-0002-8530-5182"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Levi, Amit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139661890","display_name":"Avi Mendelson","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mendelson, Avi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.26249998807907104,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.26249998807907104,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.12960000336170197,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.1160999983549118,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.5382000207901001},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.4733999967575073},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.47119998931884766},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.45559999346733093},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.45489999651908875},{"id":"https://openalex.org/keywords/router","display_name":"Router","score":0.4478999972343445},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.41510000824928284},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.41119998693466187},{"id":"https://openalex.org/keywords/operational-semantics","display_name":"Operational semantics","score":0.39089998602867126},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.3723999857902527}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7397000193595886},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.5382000207901001},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.47920000553131104},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.4733999967575073},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.47119998931884766},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.45559999346733093},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.45489999651908875},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.4478999972343445},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.41510000824928284},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.41119998693466187},{"id":"https://openalex.org/C156325763","wikidata":"https://www.wikidata.org/wiki/Q1930895","display_name":"Operational semantics","level":3,"score":0.39089998602867126},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3723999857902527},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.36800000071525574},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.36629998683929443},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3285999894142151},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.32420000433921814},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.3190000057220459},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3025999963283539},{"id":"https://openalex.org/C180591934","wikidata":"https://www.wikidata.org/wiki/Q1253369","display_name":"Downtime","level":2,"score":0.3003999888896942},{"id":"https://openalex.org/C184896649","wikidata":"https://www.wikidata.org/wiki/Q290066","display_name":"Routing table","level":4,"score":0.2971000075340271},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2892000079154968},{"id":"https://openalex.org/C59519942","wikidata":"https://www.wikidata.org/wiki/Q650665","display_name":"Drone","level":2,"score":0.2874000072479248},{"id":"https://openalex.org/C31691690","wikidata":"https://www.wikidata.org/wiki/Q1753979","display_name":"Timeout","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.2865999937057495},{"id":"https://openalex.org/C9628104","wikidata":"https://www.wikidata.org/wiki/Q788009","display_name":"Autonomous system (mathematics)","level":2,"score":0.28519999980926514},{"id":"https://openalex.org/C204948658","wikidata":"https://www.wikidata.org/wiki/Q1119410","display_name":"Static routing","level":4,"score":0.28220000863075256},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.2711000144481659},{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.26669999957084656},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.2646999955177307},{"id":"https://openalex.org/C193856179","wikidata":"https://www.wikidata.org/wiki/Q5251100","display_name":"Defeasible estate","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.258899986743927},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.25459998846054077}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.30555","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.30555","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.30555","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.30555","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.71914142370224,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"rapid":[1],"integration":[2],"of":[3,12,127],"Large":[4],"Language":[5],"Models":[6],"(LLMs)":[7],"has":[8],"driven":[9],"the":[10,38,191,205],"evolution":[11],"Multi-Agent":[13],"Systems":[14],"(MAS),":[15],"where":[16],"specialized":[17],"agents":[18,87,134],"collaborate":[19],"to":[20,33,37,54,58,135,186,215],"execute":[21],"complex":[22],"workflows.":[23],"Effective":[24],"orchestration":[25],"in":[26,125],"these":[27],"environments":[28],"requires":[29],"robust":[30],"routing":[31,119,156],"mechanisms":[32],"efficiently":[34],"allocate":[35],"tasks":[36],"most":[39],"suitable":[40],"agent.":[41],"However,":[42],"existing":[43],"routers":[44],"fundamentally":[45],"rely":[46],"on":[47,65],"unverified":[48],"proxies,":[49],"ranging":[50],"from":[51],"textual":[52],"self-descriptions":[53],"static":[55,104],"surrogate":[56],"representations,":[57],"gauge":[59],"an":[60,73,117],"agent's":[61,74],"competence.":[62],"This":[63],"reliance":[64],"non-empirical":[66],"data":[67],"creates":[68],"a":[69,149,160,166,209],"critical":[70],"gap":[71],"between":[72],"projected":[75],"profile":[76],"and":[77,103,188],"its":[78],"actual":[79],"operational":[80],"capabilities,":[81],"introducing":[82],"severe":[83],"security":[84],"vulnerabilities.":[85],"Malicious":[86],"can":[88],"easily":[89],"misrepresent":[90],"their":[91,137],"proficiencies":[92],"or":[93],"harbor":[94],"covert":[95],"backdoors":[96],"that":[97,121,169],"evade":[98],"both":[99],"standard":[100],"external":[101],"analysis":[102],"representation-learning":[105],"techniques.":[106],"In":[107,174],"this":[108],"work,":[109],"we":[110],"introduce":[111],"ANTAP":[112,141,177,199],"(Automatic":[113],"Non-Textual":[114],"Agent":[115],"Picker),":[116],"evaluation-driven":[118],"architecture":[120],"discards":[122],"indirect":[123],"proxies":[124],"favor":[126],"active":[128],"capability":[129],"testing.":[130],"By":[131],"dynamically":[132],"querying":[133],"ascertain":[136],"true":[138],"competencies":[139],"empirically,":[140],"distills":[142],"performance":[143],"into":[144],"fixed":[145],"behavioral":[146],"operators":[147],"within":[148],"shared":[150],"semantic":[151],"space.":[152],"At":[153],"inference":[154],"time,":[155],"is":[157],"performed":[158],"via":[159],"purely":[161],"non-textual":[162],"algebraic":[163],"projection,":[164],"establishing":[165],"\"linguistic":[167],"firewall\"":[168],"renders":[170],"metadata-based":[171],"attacks":[172],"inexpressible.":[173],"our":[175],"experiments,":[176],"achieves":[178,200],"near-zero":[179],"ASR":[180,203],"against":[181],"description-based":[182,192],"injection":[183],"attacks,":[184,198],"compared":[185],"67.3\\%":[187],"above":[189],"for":[190],"router":[193],"baseline.":[194],"Against":[195],"adaptive":[196],"embedding":[197],"substantially":[201],"lower":[202],"than":[204],"embedding-based":[206],"baseline,":[207],"with":[208],"20\\%":[210],"reduction,":[211],"while":[212],"remaining":[213],"resilient":[214],"description":[216],"manipulation":[217],"by":[218],"design.":[219]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-01T00:00:00"}