KNOX: Hardware-assisted Regulatory Sandbox for Generative Models

Summary

KNOX is presented as the first regulatory sandbox for generative models, built by running AI workloads inside TEEs and demonstrated on agentic workloads. For compliance, it derives an attested policy manifest per user prompt and uses an attested reference monitor to allow only actions that match it, recording every action and verdict in an attested execution graph. The authors report that KNOX meets all four requirements, detects deviations such as those caused by prompt injection, and incurs less than 1% overhead.

Related items

• HighCVE-2026-114107: HKUDS Vibe-Trading indirect prompt injection enabling shell command executionSimilar attack · NVD/CVE Database
• InfoBuilding Trust into Enterprise AI Agents: Cisco AI Defense and Workday Agent PassportSimilar attack · Cisco AI Blog
• InfoAfter the Attacker Leaves: Benchmarking Carryover Attacks on LLM AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM SystemsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoContext-Aware Prompt Injection Detection via Small Language Models in RAG Pipelines: nokast-secureRAGSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)