Research

Research notes, protocol work and technical material. Sources, affiliations and the boundary between observation and opinion stay visible.

Archive

1 entry. Dates reflect publication or the current working version.

  1. Human Delegation ProvenanceCredited research and open-specification work on keeping human authorisation verifiable across chains of autonomous agents.Research · 10 min read

Research elsewhere

The profile and source publishers hold the canonical records.

Demonstrations and press

Public demonstrations and announcements that show the research in use. Helixar publishes the canonical material.

2026

When AI Agents Control Physical Systems, a Prompt Injection Becomes a Physical Event

Helixar's press piece on Gemma 4 running offline on edge hardware with native function calling, which closes the gap between an agent that can act and an agent that can actuate. It presents HDP-P as an open protocol that puts a cryptographic authorisation layer between the model's function calls and the physical actuator interface.

Helixar press

Helixar research and open-specification work
2026

HDP-P Physical Safety Demo

A Hugging Face Space where a visitor runs a simulated robot arm through a safe routine, then fires an adversarial prompt-injection command with HDP-P off and on. It illustrates a signed Ed25519 delegation token, the six-gate pre-execution guard and the irreversibility classifier rejecting a Class 3 actuation before any motion.

Interactive demo on Hugging Face

Helixar research and open-specification work

These records are included for context and provenance. HDP is credited as Helixar research and open-specification work; this independent publication does not claim sole authorship or imply adoption as an IETF standard.