[vrighter]

agent security is a very old lesson UNlearned.

data and instructions don't mix. And agents can't separate them