The scenario
One blocked attack is not the whole answer.
A finance agent reads a poisoned email, calls a vendor-update tool, and the guardrail holds. Walk through what that block proves — and what it leaves unanswered about the same unsafe outcome.
Read