@ebelo@mastodon.social the majority of ways your agent could misbehave are at the application layer, for example sending your keys to a 3rd party server through HTTP. Tetragon cannot inspect or block any of that activity. There are so many exploits published out there, like the guy that created a fake local coffee shop to siphon data from claude as it searched the web through tools.