Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense
Across model-level safety on HarmBench and agent-level safety on AgentHarm, Membrane achieves the highest F1 on all six modern jailbreak attacks, and benign refusal on AgentHarm stays at 7-14%, well below the 28-85% range of prior guards.