New papers attack the agent-safety gap with runtime firewalls and provenance tracing · Polylog