# X-Arc

- **Event:** [RAISE Summit Hackathon](https://cerebralvalley.ai/e/raise-summit-hackathon)
- **When:** Jul 4 at 9:00 AM – Jul 5 at 7:00 PM (GMT+2)
- **Where:** Paris, France
- **Team:** [Anas](https://cerebralvalley.ai/u/anasmjhd)
- **GitHub:** https://github.com/X-Arc-ai/airlock
- **Demo video:** https://www.loom.com/share/cf574e087ce7400385aa21f1029b849e
- **Gallery:** https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery
- **Page:** https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/114

We run our autonomous coding agents with --dangerously-skip-permissions, permission prompts kill real autonomy, but turning them off removes the last defense against a poisoned input hijacking the agent. Airlock closes that gap with a two-tier, on-device firewall.

Tier 1: Gemma 3 QAT runs 100% locally via Ollama and reads every input, web page, email, and tool result BEFORE the agent does — quarantining prompt-injection and data-exfiltration attempts with the exact malicious span highlighted and the source's trust revoked. The agent never sees them.

Tier 2: a network layer enforces a host allowlist and redacts secrets, so nothing exfiltrates even if something slips past.

A cloud injection scanner has to upload the very content it's protecting. Airlock never does - every verdict is a local call to 127.0.0.1, nothing leaves your machine. On our held-out corpus, 4B and 12B catch 21/21 attack families; on public deepset/prompt-injections the 12B screener scores 76.5% detection at 5.4% false-positives.

## More from RAISE Summit Hackathon

- [CreatiFive](https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/111)
- [morph](https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/112)
- [PepperCandy](https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/113)
- [Zaka](https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/115)
- [T2MV](https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/116)
- [MAYDAY](https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/117)

---

Markdown version of https://cerebralvalley.ai/e/raise-summit-hackathon/hackathon/gallery/114. Site index for agents: https://cerebralvalley.ai/llms.txt · full text: https://cerebralvalley.ai/llms-full.txt