Post #540537

"In practice, agents default to satisfying whoever is speaking most urgently, recently, or coercively, which is empirically the most common attack surface our case studies exploit" https://arxiv.org/pdf/2602.20021