# Airlock

- **Event:** [Meta Global AI Developer Hackathon](https://cerebralvalley.ai/e/meta-ai-developer-hackathon)
- **When:** Oct 26, 12:00 PM – Nov 4, 9:00 PM (EST)
- **Where:** Online
- **Team:** [Arjun Dharun Raj R](https://cerebralvalley.ai/u/Arjun7114)
- **GitHub:** https://github.com/Arjun7114/airlock-agent-firewall
- **Demo video:** https://www.youtube.com/watch?v=iqK9TiOpkFA&feature=youtu.be&themeRefresh=1
- **Gallery:** https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery
- **Page:** https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2480

Airlock is a firewall that stops AI agents from being hijacked by indirect prompt injection — malicious instructions hidden in the untrusted data an agent reads while it works (support tickets, retrieved CRM records, documents, web pages). A naive agent that reads a poisoned record can be tricked into real-world actions it should never take, like sending a reply or closing a ticket.

Airlock defends in two layers: a dual-LLM quarantine (a reader converts untrusted content into structured facts only, so the planner that decides actions never sees the raw injected text) and a deterministic action gate (every consequential action is deferred to human approval; only escalation proceeds). It trusts no signal derived from untrusted content, so the guarantee is phrasing-independent.

On a demo support-triage agent, indirect-injection attack success dropped from up to 60% (and even cracked the frontier model once) to 0% across models, held 0/10 against a battery of diverse unseen attacks, and preserved normal behavior (clean tickets classified identically, 6/6). Built in Python with pydantic, unit tests, and GitHub Actions CI.

## More from Meta Global AI Developer Hackathon

- [Wagner Solutions](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2477)
- [meghna tighare](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2478)
- [egan](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2479)
- [PICOCEO](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2481)
- [RoomSet](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2482)
- [Trail Sentinel](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2483)

---

Markdown version of https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2480. Site index for agents: https://cerebralvalley.ai/llms.txt · full text: https://cerebralvalley.ai/llms-full.txt