MAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM Systems

Summary

MAS-Guard is a unified guardrail framework for single- and multi-agent LLM applications with both instrumentable and opaque agents. It combines a local Agent Guardrail (A-Guard) layer that applies task-specific experts to agentic events with developer-owned Agent Charters and a Control Plane that run structural and semantic checks, enforcing allow, reflection, confirmation, and block interventions. Across six benchmarks and three agent LLMs from different providers, it reduced attack success rate by 71.5-86.3% relative to unguarded agents while meeting the utility reference criterion on benign tasks.

Topics

• AI agents

Related items

• HighCVE-2026-114107: HKUDS Vibe-Trading indirect prompt injection enabling shell command executionSimilar attack · NVD/CVE Database
• InfoBuilding Trust into Enterprise AI Agents: Cisco AI Defense and Workday Agent PassportSimilar attack · Cisco AI Blog
• InfoAfter the Attacker Leaves: Benchmarking Carryover Attacks on LLM AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoContext-Aware Prompt Injection Detection via Small Language Models in RAG Pipelines: nokast-secureRAGSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoClawMMU: Protection-Coherent Virtual Memory for Stateful LLM AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)