Sentinel Gateway promoted tool-scoped execution controls, Agent v0 shipped OS sandboxing plus hash-chain logs, and NeoBild published a 336-round Termux CVE loop. Use these controls to constrain agent actions and run security analysis locally.
You can try Sentinel's browser demo, browse Agent v0's security architecture, and inspect NeoBild's Termux orchestrator. The overlap is unusually clean. Sentinel limits tool calls with short-lived scoped tokens, Agent v0 wraps agents in OS sandboxes and policy checks, and NeoBild runs a four-persona CVE loop fully local on a Redmi phone.
According to Sentinel's post, prompt injection is not something an agent can reason its way out of after the fact. The control point is the tool layer: if delete, write, or outbound actions are out of scope, the model never gets to improvise its way into them.
The live demo page makes that concrete. Demo agents only get file_read, web_read, and agent_talk; write, delete, email, calendar, and database actions are disabled, every run requires a 120-second scoped token, and the page says blocked as well as executed actions land in an audit log.
Agent v0's README reads like a security checklist for multi-agent terminal tooling. The repo says agents run inside Linux namespaces with seccomp and Bubblewrap, secrets sit in an Argon2id-protected keystore, and each action is appended to a SHA-256 hash chain.
It also exposes the orchestration shape as a list, not a black box:
NeoLogic_Dev's post claimed 336 overnight rounds on a Redmi Note 14 Pro+ with 8 GB RAM. The NeoBild repository fills in the stack: Qwen2.5-Coder-1.5B-Instruct in MNN format, MNN Chat serving an OpenAI-compatible endpoint on Termux, and four chained personas named Dominus, Axiom, Cipher, and Vector.
The repo adds two details that did not show up in the post itself. It pulls startup topics from the CISA Known Exploited Vulnerabilities catalog, and it writes both a full discourse log and a best_findings.md file when Cipher spots high-signal terms like CVE, bypass, injection, or exfiltrate.
