[vishnukool]

Good one. One thing that's becoming clear is that agent security is less about jail break prompts and more about permission boundries, hidden context flow and un intended tol behavior.