Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
The authors investigate whether standard runtime isolation mechanisms can allow a compiler to access proprietary scientific code while strictly hiding those modules from an autonomous coding agent. Safeguarding intellectual property is critical for deploying autonomous coding agents within sensitive scientific and commercial codebases that require automated build-and-test loops. Evaluating fifteen distinct read routes against containers, permission policies, and sandboxes reveals that none of these defenses can distinguish compiler reads from agent reads, exposing a fundamental gap in agent isolation.
Across fifteen read vectors, standard containers and sandboxes completely fail to distinguish an autonomous coding agent from the compiler it executes, leaving proprietary dependencies exposed to exfiltration.
The compiler must read modules a physics-based solver cannot build without; the coding agent must not read that intellectual property. The harness does not ship that rule. We classified fifteen read routes against a container, permission rules and a sandbox. None of the three can tell which program is reading.