Agentic large language model (LLM) networks are increasingly used in safety-critical settings where autonomous agents invoke tools, exchange context, and coordinate decisions. Prompt-injection attacks remain a significant threat to these multi-agent pipelines because they can compromise data flows between agents, bypass instruction hierarchies, and corrupt output integrity. Although defenses against injected prompts and mechanisms for cryptographically verifying model-related computations have been studied independently, no common framework unifies these complementary security perspectives in a protocol suitable for real-time agentic deployments. From the perspective of symmetry, secure inter-agent communication requires the preservation of an invariant integrity relationship between a message at its source and the corresponding message accepted at its destination. A benign communication path therefore exhibits a form of integrity symmetry, whereas prompt injection or message manipulation creates an asymmetric state in which the received payload, its semantic effect, or the receiving model’s internal activation pattern deviates from the trusted reference state. In this paper, we propose SecurePrompt-IntegrityNet (SPI-Net), a prompt-injection-resilient data integrity verification protocol that combines cryptographic attestation with anomaly-aware activation monitoring. SPI-Net provides three closely related mechanisms: a Merkle-tree-based commitment system that verifies the provenance and integrity of data payloads exchanged between agents; a layer-wise Mahalanobis-scoring Activation Anomaly Detector (AAD) that identifies distributional shifts in the intermediate representations of LLMs; and a Trust Propagation Consensus (TPC) mechanism that combines cryptographic and behavioral evidence into per-payload integrity verdicts. In this formulation, the Cryptographic Attestation Module (CAM) tests whether message-level structural symmetry is preserved between the sender and receiver, whereas the AAD detects behavioral symmetry breaking in activation space. Experiments on three multi-agent benchmarks under five adaptive attack strategies show that SPI-Net achieves a 96.8% detection rate with a 1.7% false positive rate, reduces the attack success rate by 94.3% relative to undefended baselines, verifies data integrity with 99.2% accuracy, and introduces only 38 ms of median per-message latency. These results demonstrate that jointly preserving cryptographic integrity symmetry and identifying activation-level asymmetry provides substantially stronger prompt-injection resilience than either verification mechanism alone.
Faisal Alhwikem, A. Khan, Fawwad Hassan Jaskani· Symmetry· 0 citations
: Large Language Models (LLMs) have recently advanced in real-world commonsense reasoning, including understanding everyday object behaviors and inferring their attributes from text. However, they remain limited in reasoning about the real-world consequences of events, such as how object failures, obstructions, or structural changes affect the surrounding environment-especially without visual or sensorimotor input. Existing works like PIQA and NEWTON evaluate narrow sub-skills, such as whether an object action makes sense and whether object properties can be inferred, providing valuable benchmarks for commonsense and physical reasoning but offering limited evaluation of how events alter environmental functionality and downstream conditions. To address this gap, we propose Embodied Semantic Grounding (ESG), a framework that equips LLMs with consequence-aware text representations. ESG learns a consequence-grounded space by aligning event descriptions with affordance maps-structured representations of how an environment can be used or traversed after an event-capturing how structural changes modify environmental functionality. A Flan-T5-XL model is trained with a contrastive alignment objective to encode event descriptions into this space, for coherent prediction of consequences such as collapses, blockages, and environmental changes. Rather than introducing a new language-model architecture, ESG extends affordance-grounding with consequence-level representations of post-event environmental functionality. We evaluate ESG on a unified benchmark comprising PIQA, NEWTON, LIBERO-derived affordance text, and 2400 synthetic scenario-based tasks. Results show that ESG improves performance over baseline language models across commonsense reasoning and consequence-prediction benchmarks. Under structured affordance-map supervision, ESG improves zero-shot accuracy on PIQA and NEWTON and demonstrates improved performance on synthetic consequence-prediction scenarios designed to evaluate post-event environmental reasoning.
Manaswi Kulahara, Khadija Parwez, Faisal Alhwikem et al.· Computers, Materials & C...· 0 citations
Design-AI, a novel framework that integrates deep evolutionary algorithms with adaptive intelligence to automate the identification and recommendation of refactoring opportunities, achieves high precision and recall in recommendations, outperforming state-of-the-art academic and commercial refactoring solutions.
Faisal Alhwikem· International Conference on...· 0 citations
This study addresses the trajectory tracking control problem for an underactuated hovercraft subject to additive bias and multiplicative loss-of-effectiveness thruster faults under environmental disturbances. In these systems, actuator degradation structurally breaks the differential flatness mapping, driving nominal controllers to generate control actions that induce severe actuator saturation and cause instability. To resolve this challenge, a hierarchical physics-informed neural adaptive control (PINAC) framework is proposed. First, a gated-recurrent-unit physics-informed neural observer (PINO) is designed to isolate thruster faults from exogenous hydrodynamic disturbances. Second, a constrained Safe-TD3 reinforcement learning agent functions as a supervisor, computing an online dilation factor to slow down the mission timeline, thereby reconfiguring the reference trajectory to accommodate degraded actuator boundaries. Third, a low-level non-singular terminal sliding mode (NTSM) controller is implemented as a tracking-guarantee layer. Unlike classical asymptotic schemes where convergence is only achieved as time approaches infinity, or finite-time controllers where the settling time depends on the initial state, the proposed PINAC framework guarantees practical fixed-time stability, ensuring that the settling-time bound is independent of initial conditions. Simulation results demonstrate that the designed controller prevents actuator saturation, provides smooth trajectory adjustment, and reduces tracking errors under severe composite faults.
Shafqat Ali, Aamir Mehmood, Faiza Iftikhar et al.· Journal of Marine Science an...· 0 citations
Safety-critical cyber-physical systems require strict verification methodologies explicitly taken to reference safety properties in their tests. Conventional methods of mutation testing simply lump all mutants together, regardless of their effects on product safety, resulting in ineffective resource allocation and insufficient understanding of the behaviors of crucial safety interest. The novel mutation-guided safety assurance framework presented by this paper is called MuGu and it combines mutation testing and formal safety property enforcement. It uses a hierarchical safety constraint analyzer that classifies mutants (temporally) according to their ability to break temporal safety specifications modeled in Signal Temporal Logic (STL). A graph attention network encodes program semantics and control-flow dependencies to forecast the probability of safety violations, enabling effective prioritization of safety-critical mutants. The proposed safety-conscious mutation delineators use vital areas of the code, such as sensor interfaces, actuator commands, and decision-making code in autonomous systems. Extensive testing on two publicly accessible benchmark sets, namely the Software-artifact Infrastructure Repository (SIR) and Defects4J, shows that MuGu achieves 96.3% safe property coverage and requires 71.8% fewer new tests than traditional methods. The scheme determines 2.4 times as many safety-violating methods as state-of-the-art methods and decreases wasted effort on equivalent mutants by 64.2%. The statistical analysis demonstrates overwhelming improvements across all primary metrics in 12 baseline comparisons p<0.001. MuGu provides a rational basis for applying safety-oriented next-generation mutation testing in autonomous systems.
Faisal Alhwikem· Applied Sciences· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
