@misc{indiciaef9a57f295817,
  title = {Reachability-Based Capability Confinement for LLM Agents under Indirect Prompt Injection},
  author = {Wujie Xiong and Rabimba Karanjai and Yang Lu and Weidong Shi and Lei Xu},
  year = {2026},
  url = {https://arxiv.org/abs/2608.30041},
  note = {Source identifier: 2608.30041}
}