Trail of Bits
US security research and engineering firm, in this spoke as the author of vms-wont-contain-agents — the twelve-hour agent-versus-hypervisor experiment that found QEMU/KVM escapable three times over and firecracker not escaped in the same run.
It also co-runs patch-the-planet with openai, which is where the model used in that experiment came from. So the party demonstrating the capability is partnered with the party that built it. The post discloses this, and the finding is technical and checkable rather than comparative, which is why the page tiers on what it rests on rather than on who wrote it.
No Wikipedia or Wikidata identifier recorded, and that is a deliberate omission. Trail_of_Bits
on English Wikipedia redirects to Alexander Sotirov, a co-founder — a person, not the firm — so
linking it would point a reader at the wrong entity. The identifier that looked right in a search was
checked and discarded; this is the invariant doing its job.
Related
vms-wont-contain-agents · patch-the-planet · hypervisor-isolation · firecracker