Agent authority
Identity, delegated permissions, tool contracts, approvals, revocation and non-human accountability.
Open research / versioned sources
Standards are inputs. Evidence is the output.
Delx Security maintains a versioned baseline for agentic AI, application security, cloud controls and incident readiness.
Research agenda
Context integrity
Prompt injection, memory poisoning, retrieval trust, cross-agent influence and durable contamination.
Safe execution
Sandbox boundaries, egress, secrets, supply chain, side-effect controls and emergency interruption.
Assurance evidence
Runtime proof, reproducibility, control drift, verification quality and decision-useful reporting.
Primary sources
NIST Cybersecurity Framework 2.0Official source ↗NIST AI Risk Management FrameworkOfficial source ↗OWASP Top 10 for Agentic Applications 2026Official source ↗OWASP Application Security Verification Standard 5.0Official source ↗MITRE ATLASOfficial source ↗CISA Secure by DesignOfficial source ↗NIST Secure Software Development FrameworkOfficial source ↗RFC 9116 — security.txtOfficial source ↗
Publication standard
Research notes distinguish verified facts, inferences, experiments and open questions. Versions and retrieval dates stay attached to changing frameworks.
We do not publish exploit details that create disproportionate harm, client evidence, private infrastructure or claims that cannot be independently supported.