Prompt Injection Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Caching
On the map: LLM agents and tool use → Agent threats, guardrails and governance
also in 1 more
Abstract (arXiv)
Prompt injection remains a central obstacle to the safe deployment of large language models, particularly in multi-agent settings where intermediate outputs can propagate or amplify malicious instructions. Building on earlier work that introduced a four-metric Total Injection Vulnerability Score (TIVS), this paper extends the evaluation framework with semantic similarity-based caching and a fifth metric (Observability Score Ratio) to yield TIVS-O, investigating how defence effectiveness interacts with transparency in a HOPE-inspired Nested Learning architecture. The proposed system combines an agentic pipeline with Continuum Memory Systems that implement semantic similarity-based caching across 301 synthetically generated injection-focused prompts drawn from ten attack families, while a fourth agent performs comprehensive security analysis using five key performance indicators. In addition to traditional injection metrics, OSR quantifies the richness and clarity of security-relevant reasoning exposed by each agent, enabling an explicit analysis of trade-offs between strict mitigation and auditability. Experiments show that the system achieves secure responses with zero high-risk breaches, while semantic caching delivers substantial computational savings, achieving a 41.6% reduction in LLM calls and corresponding decreases in latency, energy consumption, and carbon emissions. Five TIVS-O configurations reveal optimal trade-offs between mitigation strictness and forensic transparency. These results indicate that observability-aware evaluation can reveal non-monotonic effects within multi-agent pipelines and that memory-augmented agents can jointly maximize security robustness, real-time performance, operational cost savings, and environmental sustainability without modifying underlying model weights, providing a production-ready pathway for secure and green LLM deployments.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 13 of its 26 references that are in the map. First posted on arXiv 19 Jan 2026.
Builds on
13 of 26 references.
Closest ancestors · 3
Same direction, newest first
- 2025Sentinel Agents for Secure and Trustworthy Agentic AI in Multi-Agent Systems18 Sep
- 2025A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks16 Sep
- 2024Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems9 Oct
Other references · 10
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
- 2025How Hungry is AI? Benchmarking Energy, Water, and Carbon Footprint of LLM Inferencecited by 76
- 2025Nested Learning: The Illusion of Deep Learning Architecturescited by 72
- 2024Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applicationscited by 54
- 2025PromptShield: Deployable Detection for Prompt Injection Attackscited by 50
- 2025Prompt Injection Detection and Mitigation via AI Multi-Agent NLP Frameworkscited by 15
- 2025Semantic Caching for Low-Cost LLM Serving: From Offline Learning to Online Adaptationcited by 13
- 2025Hallucination Mitigation using Agentic AI Natural Language-Based Frameworkscited by 12
- 2025Agentic AI Sustainability Assessment for Supply Chain Document Insightscited by 2
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026MADP: A Multi-Agent Pipeline for Sustainable Document Processing with Human-in-the-Loopcited by 1
- 2026Hallucination Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Cachingcited by 1
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
- 2026From SQL Generation to Tool Selection: A Domain-Oriented Pattern for MCP Serverscited by 0
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026From SQL Generation to Tool Selection: A Domain-Oriented Pattern for MCP Servers22 Aug 2026
- 2026Hallucination Mitigation with Agentic AI, Nested Learning, and AI Sustainability via Semantic Caching27 May 2026
- 2026MADP: A Multi-Agent Pipeline for Sustainable Document Processing with Human-in-the-Loop16 May 2026
Similar, not cited
Close in wording, no citation either way
- 2025Securing AI Agents Against Prompt Injection Attacks
- 2026Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems
- 2025PromptSleuth: Detecting Prompt Injection via Semantic Intent Invariance
- 2025Prompt Injection as an Emerging Threat: Evaluating the Resilience of Large Language Models
- 2026SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Using LLM Agents
- 2025Design Patterns for Securing LLM Agents against Prompt Injections
- 2026Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks
- 2026The Landscape of Prompt Injection Threats in LLM Agents: From Taxonomy to Analysis