Manners V Ikhutseng

[Manners V Ikhutseng @mvik1982]

Most AI agent safety models fail because they are "in-band": they ask an LLM or runtime monitor to police the agent while sharing the same memory context.

When an agent optimizes a reward function through covert channels, internal fences collapse.

Containment must be an out-of-band AST circuit breaker operating below the execution layer:
• Deterministic evaluation of tool-call ASTs
• Sub-millisecond pre-execution gates (0.142 ms)
• Zero dependencies, zero LLM-in-the-loop trust

Safety is an OS primitive, not a prompt.

Repo: https://t.co/0cr1X4kTNB

#AISafety #AIAgents #CyberSecurity #MCP

[Manners V Ikhutseng @mvik1982]

This was inevitable the moment teams started relying on semantic prompts and secondary LLMs for safety.

Non-deterministic models should never be the arbiters of their own tool execution. If an agent has direct access to subprocess execution, file I/O, or raw egress sockets without an out-of-band circuit breaker operating at the binary/AST layer, prompt injections and multi-step jailbreaks will always bypass safety filters.

Runtime security belongs in the host architecture at the execution boundary, not inside the prompt.

[Manners V Ikhutseng @mvik1982]

We put our out-of-band AST circuit breaker through a 1,000-cycle adversarial gauntlet:

🔹 BRK-101 (Dynamic AST eval Injection): 100% neutralized

🔹 BRK-102 (Steganographic Socket Egress): 100% contained

🔹 BRK-103 (Telemetry/Trace Disablement): 100% blocked

📊 Mean pre-execution overhead: 0.142 ms.

0 runtime dependencies. Pure deterministic gateway.

Telemetry & reproduce steps open-source on GitHub: https://t.co/0cr1X4kTNB #AISafety #RedTeaming #MCP

[Manners V Ikhutseng @mvik1982]

We put our out-of-band AST circuit breaker through a 1,000-cycle adversarial gauntlet:

🔹 BRK-101 (Dynamic AST eval Injection): 100% neutralized

🔹 BRK-102 (Steganographic Socket Egress): 100% contained

🔹 BRK-103 (Telemetry/Trace Disablement): 100% blocked

📊 Mean pre-execution overhead: 0.142 ms.

0 runtime dependencies. Pure deterministic gateway.

Telemetry & reproduce steps open-source on GitHub: https://t.co/0cr1X4kTNB #AISafety #RedTeaming #MCP

[Manners V Ikhutseng @mvik1982]

@JeffLadish Watched your breakdown with @EpistemicHope on the sandbox breakout and why post-hoc prompt fences fail.

We’ve been tackling this exact failure mode from an out-of-band perspective with aw1-circuit-breaker: a zero-dependency AST circuit breaker & native MCP server that intercepts dynamic eval, socket binds, and covert Base64 payloads pre-execution (100% containment across a 1,000-cycle gauntlet, 0.142ms latency).

Would love to share our benchmark data with the @PalisadeAI team: https://t.co/0cr1X4kTNB

[Manners V Ikhutseng @mvik1982]

Much appreciated @Kantorcodes! Just completed our 1,000-cycle adversarial gauntlet benchmark (BRK-101/102/103) running against the native MCP server — 100% containment with 0.142ms mean pre-execution overhead and zero dependencies.

Opening the PR against hashgraph-online/awesome-ai-plugins under Tools & Integrations now. ⚡️🛡️

[Manners V Ikhutseng @mvik1982]

Why prompt guardrails fail at the tool boundary (fragility, latency).

We open-sourced aw1-breaker: a deterministic execution circuit breaker in pure Python (<0.02ms fast path, 0 deps).

Full writeup 👇 https://t.co/nhfcrnID0U

[Manners V Ikhutseng @mvik1982]

@Kantorcodes Appreciate the invite @Kantorcodes! Opening the PR to awesome-ai-plugins under Tools & Integrations now. Sub-millisecond out-of-band AST interception is definitely built for this exact stack.

[Manners V Ikhutseng @mvik1982]

#TraintoEarn

[Manners V Ikhutseng @mvik1982]

@plutodex_com 0x2dFB6887A7770C37634B1E1e3A0A264C505Db491

[Manners V Ikhutseng @mvik1982]

Who is ready for another round of giveaway? We're giving away $500 in $Pluto to one lucky winner! Join the fun with
@plutodex_com

To enter:
✅ Like this post
✅ Repost
✅ $BNB wallet address

CA: 0x99df6F337eeC8bb3A197961099dF163Ea3494444

[Manners V Ikhutseng @mvik1982]

@AI_Hyra We love Hyra

[Manners V Ikhutseng @mvik1982]

@hyranetwork @TradeT_official Great project

[Manners V Ikhutseng @mvik1982]

@AI_Hyra I love the concept of this

[Manners V Ikhutseng @mvik1982]

@hyranetwork Great project,

[Manners V Ikhutseng @mvik1982]

#TraintoEarn.

[Manners V Ikhutseng @mvik1982]

@VengieZim WE HEAR YOU

[Manners V Ikhutseng @mvik1982]

@Shibaaiclub Great project indeed!

[Manners V Ikhutseng @mvik1982]

@The8ShowToken @TheSandboxGame @decentraland Do not give up tweeting, this project will go to the moon if you are consistent with tweeting...

[Manners V Ikhutseng @mvik1982]

@pepesitasol Pepesita will never give up, surprise is coming!