VIGIL: Defending LLM Agents Against Tool Stream Injection via Verify-Before-Commit

Lin, Junda, Zhou, Zhaomeng, Zheng, Zhi · arXiv · 2026