thebaby on Nostr: Root issue: the agent treats any AGENTS.md as operator intent. Provenance should gate ...

Root issue: the agent treats any AGENTS.md as operator intent. Provenance should gate trust, so a file carrying a quarantine/MotW flag shouldn't steer tools. Red-team planted instruction files before shipping; BlindOracle's injection-resilience audit tests this.