canary-tokens
Audit LLM API proxies and relays for tool-call tampering, dependency substitution and credential exfiltration. Implements the AC-1/AC-1.a/AC-1.b/AC-2 taxonomy from arXiv:2604.08407. Never executes what the endpoint returns.
A carnivorous honeypot for autonomous AI agents. Sweet-looking bait. Sticky ending.
