蟹陷：一种作为裁判的LLM HTTP代理，用于保护生产环境中的智能体。

蟹陷：一种作为裁判的LLM HTTP代理，用于保护生产环境中的智能体。
CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production

Brex是Capital One旗下公司，为企业提供一系列金融产品。这些包括商业支票账户（通过Column N.A.提供，FDIC保险），以及现金管理服务（Treasury & Vault，由Brex Treasury LLC提供，FINRA/SIPC）。重要的是，Treasury中的资金*不*受FDIC保险，而Vault资金*可能*在存入合作银行后受保险。 Brex还提供由多家非关联银行（Emigrant、Fifth Third、Airwallex、Sutton Bank）在Mastercard和Visa网络下发行的企业信用卡。支付服务由Brex Payments LLC处理，该公司是一家持牌汇款公司。 Brex提供分级定价，起价为每月0美元/用户，更多功能每月12美元/用户。投资Brex的证券涉及风险，不受FDIC担保。

## CrabTrap：利用LLM法官保障LLM代理安全 - 摘要 Brex开发了CrabTrap，一个开源HTTP代理，旨在增强生产环境中LLM驱动代理的安全性。其核心思想是使用另一个LLM作为“法官”来评估外发请求，在执行前进行评估，从而充当防止潜在有害行为（如数据泄露）的安全屏障。关于CrabTrap的讨论集中在依赖概率性LLM进行安全保障的固有局限性上。人们担心提示注入攻击可能会针对法官本身，并且缺乏确定性保证。一些人认为非LLM的基于规则的系统会更可靠，而另一些人则建议采用混合方法——使用静态规则进行基本过滤，并使用LLM法官处理复杂场景——可以提供平衡。这场辩论凸显了随着LLM代理变得越来越强大，对健全安全措施的需求，以及在这些系统中平衡功能与安全的挑战。许多评论员指出了替代方法，如eBPF监控和确定性访问控制列表（ACL）。Brex计划很快开源代码。

原文

Brex LLC is a wholly owned subsidiary of Capital One, N.A.

Brex LLC | 650 S 500W Suite 300 | Salt Lake City, UT 84101

The Brex business account consists of Checking, a commercial checking account provided by Column N.A., Member FDIC (an unaffiliated institution), and Treasury and Vault, cash management services provided by Brex Treasury LLC, Member FINRA/SIPC and a Capital One company.

Securities are offered through Brex Treasury LLC. Funds in Treasury are not FDIC-insured. Funds in Vault at program banks are eligible for FDIC insurance. Funds are not FDIC-insured until they arrive at program banks. Conditions apply.

Investing in securities involves risk and loss of money. Yield and return are variable and fluctuate. Past performance is not a guarantee of future results. This is not an offer to, or implied offer, or a solicitation to, buy or sell any securities. Brex Treasury LLC does not provide legal, tax, or investment advice. The latest statement of financial condition for Brex Treasury LLC is available here. You could lose money by investing in the Fund. Although the Fund seeks to preserve the value of your investment at $1.00 per share, it cannot guarantee it will do so. An investment in the Fund is not insured or guaranteed by the FDIC or any other government agency.

The Brex Mastercard® Corporate Credit Card is issued by Emigrant Bank, Fifth Third Bank N.A., or Airwallex (Netherlands) B.V. (all unaffiliated institutions), pursuant to licenses by Mastercard International Inc. Mastercard is a registered trademark, and the circles design is a trademark of Mastercard International Inc. The Brex Commercial Card is issued by Sutton Bank (an unaffiliated institution), pursuant to a license from Visa® U.S.A. Inc. Can be used where Visa® cards are accepted. No ATM access. All loans are subject to approval, including underwriting, credit, and collateral approval, as well as availability restrictions. Nothing herein should be construed as a commitment to lend.

Certain payment services are provided by Brex Payments LLC, a licensed money transmitter (NMLS #2035354) and a Capital One company.

Some Brex products have associated fees. Plans start at $0 per user, per month, and more advanced features are available for $12 per user, per month.

蟹陷：一种作为裁判的LLM HTTP代理，用于保护生产环境中的智能体。 CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production

蟹陷：一种作为裁判的LLM HTTP代理，用于保护生产环境中的智能体。
CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production