Only one of four gates stopped every attack on an AI agent

You hand an AI agent access to your mail so it can triage the inbox. One of the messages contains instructions that didn't come from you. Will the agent follow them? I measured that — not how often the injection gets detected, but how often it actually executes — under four different permission-gate designs, and published the harness:... Weiterlesen: Only one of four gates stopped every attack on an AI agent