Singapore Management University

Researchers at Singapore Management University, Nanjing University and Adelaide University propose Aletheia, which turns the permissions a repository rule file requests into sandbox settings and checks whether the agent still passes independent tests when each is withheld. With GPT-5.5 on one shared refactoring task, they report alarms on all 314 AIShellJack attack inputs, none on five benign templates, and three false positives among 80 benign GHAgentFiles rules. The paper states these figures do not establish a population false-positive rate.