FRESCO: Complete and Scalable Temporal Safety for CHERI Application Processors

arXiv:2608.26353 · cs.CR · Submitted 2026-08-26 · Read on arXiv

cs.CR

Submitted: 2026-08-26

Updated: 2026-08-26

Code: https://github.com/CTSRD-CHERI/Flute

Project page: https://riscv.github.io/riscvcheri/#section

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Allocator — 55× in this paper · explained in 1 episode
• Provenance — 41× in this paper · explained in 4 episodes
• Color Saver — 24× in this paper
• Benchmark — 18× in this paper · explained in 2 episodes
• Core — 11× in this paper · explained in 2 episodes
• AI Agents — 3× in this paper · explained in 2 episodes
• Abstraction — 2× in this paper · explained in 1 episode
• Adaptation — 2× in this paper · explained in 1 episode
• Decoupling — 2× in this paper · explained in 2 episodes
• Artificial Intelligence (AI) — 1× in this paper · explained in 2 episodes
• Capability Hardware Enhanced RISC Instructions — 1× in this paper
• Decode — 1× in this paper · explained in 2 episodes
• Graceful Degradation — 1× in this paper · explained in 2 episodes
• Queries Per Second — 1× in this paper
• Trace — 1× in this paper · explained in 2 episodes

Sources

• CHERI-D: Secure and efficient inline object ID for CHERI temporal memory safety
• ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs