Archestra releases OpenAPPA; reports 0% attack success on two agent-security benchmarks
Archestra published OpenAPPA, an open-source security engine and policy framework (Agentic Permissions Policy Algebra, APPA) that runs outside an agent’s prompt/execution loop and enforces deterministic, lattice-based data-audience/trust rules. In reported runs on Bench-Corp and AgentThreatBench (also referred to as OWASP AgentThreatBench), the team states OpenAPPA had a 0% attack success rate with an 89% task completion rate versus 10% (≈90% completion) for Claude Code’s auto mode and 31% (≈41% completion) for Microsoft FIDES.