Your Guardrail Cannot Read What Your Agent Is About to Run

Adversa AI handed GitHub Copilot CLI an encrypted instruction, the key, and a polite note asking it to decrypt. The agent's own code runtime did the rest. Static filters read text; this payload was never readable until it was already running.

Read Original

Related