{"data":{"id":"7df3bb4f-86fd-4c93-a85f-3af16b9f074e","title":"KNOX: Hardware-assisted Regulatory Sandbox for Generative Models","summary":"KNOX is presented as the first regulatory sandbox for generative models, built by running AI workloads inside TEEs and demonstrated on agentic workloads. For compliance, it derives an attested policy manifest per user prompt and uses an attested reference monitor to allow only actions that match it, recording every action and verdict in an attested execution graph. The authors report that KNOX meets all four requirements, detects deviations such as those caused by prompt injection, and incurs less than 1% overhead.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.27543v1","publishedAt":"2026-10-20T02:57:19.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-20T02:57:19.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}