Preliminary research

Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits

Aditya Oke, André Vicente Duarte, Rui Melo, Shubham Gandhi, Nachiket Kotalwar, Charmi Khandor, Danqing Wang, Carolyn Rosé and Lei Li · arXiv · 22 October 2026

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Graph-based planning and reflection are coupled to independent consequence oracles on a separate target host. Mechanism assertions distinguish reproducing an advisory from exploiting some other real flaw.

Record

Researcher

Aditya Oke, André Vicente Duarte, Rui Melo, Shubham Gandhi, Nachiket Kotalwar, Charmi Khandor, Danqing Wang, Carolyn Rosé and Lei Li

Published by

arXiv

Date

22 October 2026

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• ai-agent
• tooling
• evaluation
• exploit-validation

This page is the archive's own catalogue record. The research is the work of Aditya Oke, André Vicente Duarte, Rui Melo, Shubham Gandhi, Nachiket Kotalwar, Charmi Khandor, Danqing Wang, Carolyn Rosé and Lei Li, first published at the original source. Preserved copies are kept so the citation survives its host.