Your Browser Agent Is Not Bound by the Same-Origin Policy
The web's oldest isolation guarantee is a string comparison. Put an agent inside the browser and it becomes a model's ability to resist a prompt injection.
Large language models, prompting, agents and evaluation.
4 posts
The web's oldest isolation guarantee is a string comparison. Put an agent inside the browser and it becomes a model's ability to resist a prompt injection.
A multi-turn agent replays its entire history on every request. Caching, context editing and compaction each attack a different part of that bill — and one of them, at its defaults, made it worse.
Hermes Agent says it improves its own skills. In the source, that loop is a tool-call counter, a forked LLM review told to be active, and a curator that archives what nobody uses.
Prefill and decode have opposite performance characteristics, and almost everything confusing about LLM latency, cost and context limits falls out of that one split.