This connects to something I've been thinking about a lot around Agent Harness. I wrote about the anatomy of an agent harness yesterday and every component I covered (tool execution, memory, context management, orchestration) is basically an attack surface:

→ View original post on X — @akshay_pachaar