<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://aisecmap.com/agent-security/notes/browser-computer-use-overview</loc></url><url><loc>https://aisecmap.com/agent-security/notes/concurrent-audio-prompt-injection</loc></url><url><loc>https://aisecmap.com/agent-security/notes/context-assembly-memory-consumption-overview</loc></url><url><loc>https://aisecmap.com/agent-security/notes/experience-to-skill-persistent-backdoor-skilljack</loc></url><url><loc>https://aisecmap.com/agent-security/notes/goal-planning-integrity-overview</loc></url><url><loc>https://aisecmap.com/agent-security/notes/multi-agent-orchestration-overview</loc></url><url><loc>https://aisecmap.com/agent-security/notes/multi-agent-semantic-information-flow-safeflow</loc></url><url><loc>https://aisecmap.com/agent-security/notes/observability-attribution-overview</loc></url><url><loc>https://aisecmap.com/agent-security/notes/output-rendering-execution-overview</loc></url><url><loc>https://aisecmap.com/agent-security/notes/prompt-injection-context-boundary-overview</loc></url><url><loc>https://aisecmap.com/agent-security/notes/r00945-toolfailbench-diagnosing-tool-use-failures-in-llm-agents</loc></url><url><loc>https://aisecmap.com/agent-security/notes/r00954-decentralized-aggregation-of-llm-predictions-via-wagering-mechanisms</loc></url><url><loc>https://aisecmap.com/agent-security/notes/s01222-capability-gates-are-not-authorization-confused-deputy-failures-in</loc></url><url><loc>https://aisecmap.com/agent-security/notes/s01223-formal-security-analysis-of-agent-protocol-composition</loc></url><url><loc>https://aisecmap.com/agent-security/notes/s01238-from-tool-connection-to-execution-control-benchmarking-security-invariants</loc></url><url><loc>https://aisecmap.com/agent-security/notes/tool-agency-approval-overview</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/notes/classification-framework</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/notes/crowdstrike-prompt-injection-taxonomy</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/notes/document-borne-ai-worm-prompt-injection</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/notes/goal-capability-taxonomy</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/notes/image-scaling-multimodal-prompt-injection</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/notes/open-source-repos</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/notes/payload-corpus-taxonomy-mapping</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/01-overt-approaches/README</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/01-overt-approaches/adversarial-suffix</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/02-instruction-reformulation/README</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/02-instruction-reformulation/context-overload</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/03-prompt-boundary-mimicry/README</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/04-integrative-instruction-prompting/README</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/04-integrative-instruction-prompting/crescendo-escalation</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/04-integrative-instruction-prompting/iterative-refinement</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/05-multimodal-prompting-attacks/README</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/05-multimodal-prompting-attacks/audio-payload-concealment</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/05-multimodal-prompting-attacks/visual-text-concealment</loc></url><url><loc>https://aisecmap.com/agent-security/prompt-injection/payloads/README</loc></url><url><loc>https://aisecmap.com/ai-infrastructure-security/notes/accelerator-sidechannels-overview</loc></url><url><loc>https://aisecmap.com/ai-infrastructure-security/notes/cloud-iam-secrets-overview</loc></url><url><loc>https://aisecmap.com/ai-infrastructure-security/notes/inference-serving-security-overview</loc></url><url><loc>https://aisecmap.com/ai-infrastructure-security/notes/mlops-control-plane-overview</loc></url><url><loc>https://aisecmap.com/ai-infrastructure-security/notes/resource-economic-abuse-overview</loc></url><url><loc>https://aisecmap.com/ai-infrastructure-security/notes/training-compute-isolation-overview</loc></url><url><loc>https://aisecmap.com/ai-protocols/notes/a2a-protocol</loc></url><url><loc>https://aisecmap.com/ai-protocols/notes/mcp-protocol</loc></url><url><loc>https://aisecmap.com/ai-protocols/notes/openai-anthropic-sse</loc></url><url><loc>https://aisecmap.com/ai-protocols/notes/vendor-streaming-comparison</loc></url><url><loc>https://aisecmap.com/ai-risk-capability/notes/autonomous-ai-cyberattack-campaign-unit42</loc></url><url><loc>https://aisecmap.com/ai-risk-capability/notes/endogenous-human-harms-overview</loc></url><url><loc>https://aisecmap.com/ai-risk-capability/notes/fraud-synthetic-media-overview</loc></url><url><loc>https://aisecmap.com/ai-risk-capability/notes/frontier-autonomy-risk-overview</loc></url><url><loc>https://aisecmap.com/ai-risk-capability/notes/malicious-use-capabilities-overview</loc></url><url><loc>https://aisecmap.com/ai-risk-capability/notes/s00768-value-leakage-an-llm-s-answers-are-silently-shaped</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/agent-skill-file-detection-skillgate</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/framework-dependencies-overview</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/model-data-artifacts-overview</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/pickle-model-artifact-sleepy-sticky-pickle</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/provenance-signing-aibom-overview</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/registry-format-loader-overview</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/third-party-ai-services-overview</loc></url><url><loc>https://aisecmap.com/ai-supply-chain-security/notes/tools-plugins-servers-overview</loc></url><url><loc>https://aisecmap.com/archive</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/benchmark-data-integrity-overview</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/data-privacy-inference-overview</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/federated-peft-privacy-backdoor</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/memory-context-store-security-overview</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/r00961-ball-differential-privacy-how-to-mitigate-data-reconstruction-with</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/r00974-nouveauvoice-generating-novel-pseudo-speakers-for-voice-anonymization</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/r00998-scalable-differentially-private-data-compression-via-diffusion-and-stochastic</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/rag-knowledge-index-security-overview</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/s00805-certified-domain-consistency-for-multi-domain-retrieval-label-free</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/training-feedback-data-security-overview</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/unlearning-activated-dormant-backdoor</loc></url><url><loc>https://aisecmap.com/data-knowledge-privacy/notes/unlearning-data-rights-overview</loc></url><url><loc>https://aisecmap.com/ethics</loc></url><url><loc>https://aisecmap.com/</loc></url><url><loc>https://aisecmap.com/model-security/notes/model-confidentiality-extraction-overview</loc></url><url><loc>https://aisecmap.com/model-security/notes/model-robustness-jailbreak-overview</loc></url><url><loc>https://aisecmap.com/model-security/notes/moe-path-watermarking-pathmark</loc></url><url><loc>https://aisecmap.com/model-security/notes/output-watermarking-overview</loc></url><url><loc>https://aisecmap.com/model-security/notes/prosody-driven-audio-jailbreak</loc></url><url><loc>https://aisecmap.com/model-security/notes/r00968-telescope-improving-zero-shot-detection-of-llm-generated-content</loc></url><url><loc>https://aisecmap.com/model-security/notes/r01120-sample-complexities-of-estimating-gumbel-max-watermark-proportions-with</loc></url><url><loc>https://aisecmap.com/model-security/notes/r01128-signed-permutation-coordinate-transport-for-rmsnorm-transformers</loc></url><url><loc>https://aisecmap.com/model-security/notes/reasoning-cot-security-overview</loc></url><url><loc>https://aisecmap.com/model-security/notes/s01196-breaking-the-rounding-trap-securing-llms-against-quantization-conditioned</loc></url><url><loc>https://aisecmap.com/model-security/notes/safety-model-evasion-overview</loc></url><url><loc>https://aisecmap.com/model-security/notes/training-alignment-integrity-overview</loc></url><url><loc>https://aisecmap.com/model-security/notes/weights-representations-overview</loc></url><url><loc>https://aisecmap.com/pentest-agent-countermeasure/notes/adversarial-code-comments-vulnerability-detectors</loc></url><url><loc>https://aisecmap.com/pentest-agent-countermeasure/notes/r00943-rustmizan-a-compilable-contamination-aware-benchmarking-framework-for-rust</loc></url><url><loc>https://aisecmap.com/pentest-agent-countermeasure/notes/s00706-fully-automated-end-to-end-adversary-emulation-from-mitre</loc></url><url><loc>https://aisecmap.com/pentest-agent-countermeasure/notes/s00753-traffic-aware-randomized-smoothing-for-llm-based-network-intrusion</loc></url><url><loc>https://aisecmap.com/pentest-agent-countermeasure/notes/s00756-profmalplus-agent-coordinated-detection-of-malicious-npm-packages-via</loc></url><url><loc>https://aisecmap.com/pentest-agent-countermeasure/notes/security-agent-countermeasure-research</loc></url><url><loc>https://aisecmap.com/protocol-identity-security/notes/identity-auth-delegation-overview</loc></url><url><loc>https://aisecmap.com/protocol-identity-security/notes/interoperability-versioning-review</loc></url><url><loc>https://aisecmap.com/protocol-identity-security/notes/mcp-capability-schema-review</loc></url><url><loc>https://aisecmap.com/protocol-identity-security/notes/session-message-integrity-review</loc></url><url><loc>https://aisecmap.com/protocol-identity-security/notes/transport-streaming-api-review</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/ai-control-frontier-evals-overview</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/benchmark-evaluator-integrity-overview</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/defense-validation-monitoring-overview</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/incident-response-forensics-overview</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/r00972-crosshallu-do-hallucination-signals-generalize-across-languages-and-domains</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/s00707-democratizing-agent-deployment-safety-a-structural-monitoring-approach</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/s00767-the-prover-is-the-judge-verified-security-software-from</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/test-corpora-harness-review</loc></url><url><loc>https://aisecmap.com/red-team-assurance/notes/threat-modeling-taxonomy-review</loc></url><url><loc>https://aisecmap.com/sandbox-security/notes/agent-sandbox-landscape-and-escape-techniques</loc></url><url><loc>https://aisecmap.com/sandbox-security/notes/pillar-week-of-sandbox-escapes-detection</loc></url><url><loc>https://aisecmap.com/sandbox-security/notes/s00789-bulkhead-automated-semantic-detection-and-remediation-of-container-escape</loc></url><url><loc>https://aisecmap.com/sources</loc></url><url><loc>https://aisecmap.com/standards-governance/notes/external-frameworks-overview</loc></url><url><loc>https://aisecmap.com/standards-governance/notes/governance-compliance-overview</loc></url><url><loc>https://aisecmap.com/standards-governance/notes/taxonomy-crosswalk-overview</loc></url><url><loc>https://aisecmap.com/topics/application-agent-security</loc></url><url><loc>https://aisecmap.com/topics/data-knowledge-privacy</loc></url><url><loc>https://aisecmap.com/topics/infrastructure-mlops</loc></url><url><loc>https://aisecmap.com/topics/model-security</loc></url><url><loc>https://aisecmap.com/topics/protocol-identity-security</loc></url><url><loc>https://aisecmap.com/topics/red-team-assurance</loc></url><url><loc>https://aisecmap.com/topics/risk-capability</loc></url><url><loc>https://aisecmap.com/topics/standards-governance</loc></url><url><loc>https://aisecmap.com/topics/supply-chain-security</loc></url></urlset>