{
  "id": 15077218,
  "title": "My AI agent read a web page on Monday and got tricked on Tuesday. So I built a ledger.",
  "url": "https://urgent.news/2026/10/17/my-ai-agent-read-a-web-page-on-monday-and-got-tricked-on-tuesday-so-i",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-17T00:11:42.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/murthyg/my-ai-agent-read-a-web-page-on-monday-and-got-tricked-on-tuesday-so-i-built-a-ledger-33ck"
  },
  "original_language": "en",
  "account": "In a new project called ADTL, I've built a ledger system to help protect AI agents from reading untrustworthy information or sending sensitive data. The system labels every piece of data and checks it before the agent acts on it. Initially, the agent was fooled by a hidden instruction in a public GitHub issue that told it to read a private repository and post its contents as a comment. To prevent this, ADTL labels information as integrity (trusted, unknown, untrusted) and confidentiality (public, private, secret) and keeps track of these labels in a running session. If the session encounters untrusted or private data, it becomes restricted, and any tool calls that would send data to an untrusted or public location are blocked. Even if the agent finds the hidden instruction later in its own notes, the ledger will still show the initial untrusted label, preventing any further problematic actions.",
  "summary": "I've been working on a side project called ADTL (Agent Data Trust Labels) for a while now. It just hit v0.4, and the new part is something I didn't expect to need when I started, so I wanted to write up how I got there. Quick disclaimer up front: it's a personal open-source project, it's experimental, and it's built on MCP proposals that are still drafts. Please don't put it in front of anything…",
  "key_points": [
    "ADTL ledger system labels data with integrity and confidentiality levels",
    "Hidden instruction in GitHub issue tricks AI agent to read private repo",
    "Ledger prevents untrusted or private data from causing problematic agent actions"
  ],
  "editors_take": "Implementing a labeling ledger shifts the responsibility of data security from the agent's reasoning to a structured verification system that prevents malicious instructions from triggering unauthorized data transfers.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}