Researchers release AgentKernel

AgentKernel released — treats as the problem the very structure of performing privileged operations while processing untrusted inputs, as in prompt injection and memory poisoning, and proposes building an OS layer as a mandatory service that cannot be bypassed. Its four pillars are identity, for cross-organizational collaboration; perception, which replaces single-point defenses with staged filtering; cognition, i.e. memory governance with information-flow control; and execution, which reduces semantic-level requests to kernel-level permissions and enforces them. It applies classic OS security principles not to code-level threats but to semantic-level failures