2 comments

[ 6.0 ms ] story [ 41.6 ms ] thread
The root problem is that coding agents treat tool output as trusted context.