2 comments

[ 5.3 ms ] story [ 19.5 ms ] thread
The root problem is that coding agents treat tool output as trusted context.