{
  "schema_version": "1.1",
  "id": "s13:https://arxiv.org/abs/2607.25995v1",
  "slug": "2607-25995v1-1ifq7b4",
  "url": "https://feed7.dev/p/2607-25995v1-1ifq7b4",
  "title": "Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?",
  "why_included": "Kubernetes security patches improved sharply when the model received live service dependencies, showing that scanner findings alone omit context needed to avoid breaking workloads.",
  "summary": "KuTIE combines Istio call edges, Trivy findings, and service-account bindings before asking an LLM to patch Kubernetes configurations. Evaluation covered **248 trials** on a 36-deployment cluster with 31 findings across seven dependency classes.",
  "practical_implication": "Feed remediation agents the runtime relationships their patches must preserve. For topology-dependent findings, correctness rose from **11.1% with scanner-only context** to **78.0% with topology context**.",
  "agent_context": "KuTIE combines Istio call edges, Trivy findings, and service-account bindings before asking an LLM to patch Kubernetes configurations. Evaluation covered **248 trials** on a 36-deployment cluster with 31 findings across seven dependency classes.\n\nFeed remediation agents the runtime relationships their patches must preserve. For topology-dependent findings, correctness rose from **11.1% with scanner-only context** to **78.0% with topology context**.\n\nThe topology-independent control showed **no improvement**, supporting a context-specific effect rather than generic prompt enrichment. The study used one purpose-built healthcare cluster, and one of seven dependency classes did not show the broader pattern.",
  "source": {
    "name": "arXiv",
    "url": "https://arxiv.org/abs/2607.25995v1",
    "published_at": "2026-07-28T17:12:12.000Z"
  },
  "source_class": "blog_post",
  "content_type": "Paper",
  "layer": "context",
  "domains": [
    "security",
    "coding"
  ],
  "topics": [
    "context-engineering",
    "agent-reliability"
  ],
  "verification": {
    "status": "needs_review",
    "label": "Needs Review",
    "method": "unverified",
    "verified_at": null
  },
  "uncertainty": [
    "The topology-independent control showed **no improvement**, supporting a context-specific effect rather than generic prompt enrichment. The study used one purpose-built healthcare cluster, and one of seven dependency classes did not show the broader pattern."
  ],
  "connected_context": {
    "meaning": "KuTIE provides controlled evidence that context engineering should be dependency-aware, not merely additive: runtime topology sharply improved patches only when findings depended on that topology, while unrelated cases did not benefit. This strengthens the case for agents retrieving bounded, task-relevant relationships and for evaluating context effects per case, while limiting generalization to the tested cluster and dependency classes.",
    "corpus_size": 262,
    "generated_at": "2026-07-29T10:06:19.862Z",
    "connections": [
      {
        "title": "The Illusion of Robustness: Aggregate Accuracy Hides Prediction Flips under Task-Irrelevant Context",
        "source_name": "arXiv",
        "source_url": "https://arxiv.org/abs/2607.12963v1",
        "feed7_url": "https://feed7.dev/p/2607-12963v1-1oc0qmr",
        "reason": "KuTIE supplies the positive counterpart to context-induced prediction flips: relevant topology helps dependent cases, reinforcing the need to measure context effects per task rather than through aggregate accuracy."
      },
      {
        "title": "AI tools for Forward Deployed Engineering — Vasuman Moza, Varick Agents",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=l0FLhNqBOic",
        "feed7_url": "https://feed7.dev/p/ai-tools-for-forward-deployed-engineering-vasuman-moza-varick-agents-12kjg79",
        "reason": "The measured benefit of preserving real runtime relationships supports Varick’s broader prescription to capture how work actually operates before automating risky steps."
      },
      {
        "title": "RLM: Recursive Language Models for Large Codebases - Shashi, Superagentic AI",
        "source_name": "YouTube",
        "source_url": "https://www.youtube.com/watch?v=8oyalrfwgjw",
        "feed7_url": "https://feed7.dev/p/rlm-recursive-language-models-for-large-codebases-shashi-superagentic-ai-1w21nex",
        "reason": "KuTIE demonstrates why bounded evidence retrieval should select dependency relationships required by the patch instead of adding undifferentiated context."
      },
      {
        "title": "The AI bugpocalypse is here. Now what? - Jack Cable, Corridor",
        "source_name": "YouTube",
        "source_url": "https://www.youtube.com/watch?v=7JgIS42mz7U",
        "feed7_url": "https://feed7.dev/p/the-ai-bugpocalypse-is-here-now-what-jack-cable-corridor-1y20rna",
        "reason": "It gives a concrete implementation consequence for placing security review inside agent workflows: remediation agents need runtime dependencies, scanner findings, and identity bindings to avoid breaking relationships their patches must preserve."
      }
    ]
  },
  "lifecycle": "Current",
  "published_at": "2026-07-28T17:12:12.000Z",
  "modified_at": "2026-07-28T17:12:12.000Z",
  "supersedes": [],
  "expires_at": null,
  "formats": {
    "html": "https://feed7.dev/p/2607-25995v1-1ifq7b4",
    "json": "https://feed7.dev/p/2607-25995v1-1ifq7b4.json",
    "markdown": "https://feed7.dev/p/2607-25995v1-1ifq7b4.md"
  }
}