hostile-witness
An evidence firewall for a forensic agent: case data is treated as input that may be trying to steer it.
0false positives on a 1,465-line battery, tested against 29 attack variants in 7 families
Every tool output is quarantined before the model reads it and scanned for injection, because evidence can be planted by whoever it is evidence against.
The firewall was tested against 29 attack variants in 7 families, with 0 false positives on a 1,465-line battery. The variants it misses are documented alongside the ones it catches.