agent-harness-defense v0.2.0: dual-lattice IFC for LLM agent privilege escalation An open, offline-verifiable admission layer that stops instruction-privilege escalation in coding agents by enforcing a plan-first information-flow policy. A research prototype with a rigorous audit — not a turnkey production defense. The problem LLM coding agents run over untrusted web pages, docs and tool output while holding authority over security-sensitive resources (deploy keys, CI ...