Your AI agent trusts any text file. That's the vulnerability.
The files that steer an AI agent are plain text with no provenance. Anything that can write them controls the agent — and post-hoc audits and opt-in checks don't fix it. Here's what does.
provenance
1 post with the tag “provenance”