Why it matters: For agent builders, the reported OTP bypass shows that approval flows relying on an agent-accessible email account may not provide robust oversight. The authors’ framework and Countersign prototype point to trusted devices as a necessary part of enforcing approval, though the abstract does not report a deployment evaluation.
REVA uses contextual inputs and a trained probe to screen new functions in about one second, according to its abstract.
Why it matters: For builders, the reported results suggest contextual vulnerability screening may be made fast enough for real-time use without relying on a multi-call agent for each verdict. The authors also report that the probe outperforms the LLM’s direct verdict on the same prompt, highlighting a potential role for internal representations in agent engineering.