mlsanityData to 7 Oct 2026

AOHP: An Open-Source OS-Level Agent Harness for Personalized, Efficient and Secure Interaction

arXiv 2606.23449 ↗First posted 22 Jun 2026cs.AI cs.OScited by 2

Not on the map. Why?

Abstract (arXiv)

AI agents are driving a new software paradigm, with the ability to autonomously call tools, extract information, manage memory, and complete tasks that span applications and data sources. Most existing end-user operating systems, however, are designed for application-centric workflows and offer little native support for AI agents. This mismatch limits the wider adoption of agents and leads to execution overhead and safety risks when running agents on conventional systems. While the concept of agent-native operating systems is emerging, the research community lacks an open testbed to explore the architectural primitives desired for agent-mediated interaction. We present AOHP (Android Open Harness Project), an OS-level agent harness built on the Android Open Source Project (AOSP). The core design principle of AOHP is to treat agents as first-class OS actors, enabling adaptive user interfaces and agent-friendly runtime environments. AOHP preserves the mature Android software and hardware ecosystem while introducing three agent-oriented system mechanisms: personalized service composition, efficient agent interfaces, and secure information flow. Based on preliminary experiments on challenging tasks covering key capabilities of OS agents, AOHP shows clear advantages in task completion (+21.12% completion rate), execution cost (-51.55% token cost), and security-policy compliance.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 22 of its 43 references that are in the map. First posted on arXiv 22 Jun 2026.

Builds on

22 of 43 references.

References · 22

  1. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
  2. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  3. 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,134
  4. 2025UI-TARS: Pioneering Automated GUI Interaction with Native Agentscited by 584
  5. 2024SeeClick: Harnessing GUI Grounding for Advanced Visual GUI Agentscited by 553
  6. 2024GPT-4V(ision) is a Generalist Web Agent, if Groundedcited by 547
  7. 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 476
  8. 2024AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agentscited by 450
  9. 2023AppAgent: Multimodal Agents as Smartphone Userscited by 407
  10. 2024OS-ATLAS: A Foundation Action Model for Generalist GUI Agentscited by 370
  11. 2024Aguvis: Unified Pure Vision Agents for Autonomous GUI Interactioncited by 271
  12. 2024Mobile-Agent-v2: Mobile Device Operation Assistant with Effective Navigation via Multi-Agent Collaborationcited by 187
10 more
  1. 2025Mobile-Agent-v3: Fundamental Agents for GUI Automationcited by 183
  2. 2024Agent S: An Open Agentic Framework that Uses Computers Like a Humancited by 182
  3. 2020Mapping Natural Language Instructions to Mobile UI Action Sequencescited by 180
  4. 2023AutoDroid: LLM-powered Task Automation in Androidcited by 178
  5. 2025Securing AI Agents with Information-Flow Controlcited by 108
  6. 2024AndroidLab: Training and Systematic Benchmarking of Android Autonomous Agentscited by 105
  7. 2024ScreenAI: A Vision-Language Model for UI and Infographics Understandingcited by 97
  8. 2024System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspectivecited by 91
  9. 2025MobileWorld: Benchmarking Autonomous Mobile Agents in Agent-User Interactive and MCP-Augmented Environmentscited by 69
  10. 2024AutoDroid-V2: Boosting SLM-based GUI Agents via Code Generationcited by 31

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Blind Gods and Broken Screens: Architecting a Secure, Intent-Centric Mobile Agent Operating System
  2. 2025OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use
  3. 2026Toward Securing AI Agents Like Operating Systems
  4. 2026Agent Operating Systems (AOS): Integrating Agentic Control Planes into, and Beyond, Traditional Operating Systems
  5. 2026AgenticOS: An Intent-Oriented Secure Operating System Architecture for Autonomous AI Agents
  6. 2026PalmClaw: A Native On-Device Agent Framework for Mobile Phones
  7. 2025ColorAgent: Building A Robust, Personalized, and Interactive OS Agent
  8. 2026Octopus Protocol: One-Shot Hardware Discovery and Control for AI Agents via Infrastructure-as-Prompts