AgentKernel: The Trust-Native Agentic Operating System
arXiv:2609.29647v1 Announce Type: cross Abstract: Modern AI agents routinely cross trust boundaries: they ingest untrusted content, combine it with privileged instructions, persist intermediate beliefs in long-term memory, and invoke privileged tools. This creates an attack surface in which…