New benchmark evaluation: Kavach vs. real prompt-injection attacks (KavachBench)

An independent researcher's first paper, KavachBench, evaluated Kavach, a policy-enforcement runtime for AI coding agents, against IssueTrojanBench's corpus of 42 malicious tool-call actions drawn from GitHub issue payloads. The researcher reported that Kavach's coverage came from adapter canonicalization under a default-deny policy rather than benchmark-specific policy tuning, a distinction the researcher said matters for anyone evaluating similar guardrails. The researcher is seeking a cs.CR arXiv endorser for the first submission to arXiv.