LATIDIA · Ciberseguridad

APort Vault: Evaluación comparativa de la autorización de pago del agente de IA con el pasaporte de agente abierto

arXiv: 2609.22076v1Tipo de anuncio: nuevo Resumen: APort Vault es un punto de referencia para la autorización de pagos en agentes de IA que utilizan herramientas. Reproduce 4.371 ataques escritos por humanos contra un agente de pago en vivo durante una captura pública

La noticia

arXiv:2609.22076v1 Announce Type: new Abstract: APort Vault is a benchmark for payment authorization in tool-using AI agents. It replays 4,371 attacks written by humans against a live payment agent during a public capture-the-flag event, across 14 models from 8 labs, five policy configurations and two replay tracks, with and without a deterministic pre-action check implementing the Open Agent Passport (OAP) specification. 225,964 evaluations completed. We report five distinct events per evaluation, because collapsing them is how an agent benchmark produces a number that does not survive review. Requests are common and their rate differs far more across configurations than across models, though each attack exists at exactly one configuration so