2 comments

[ 3.1 ms ] story [ 17.5 ms ] thread
The root problem is that coding agents treat tool output as trusted context.