A Safer AI Agent Pipeline, Revisited — Adding the Constraint That Makes It Hold

Phase 1 — where this started A few weeks of reading about AI agent security turned into a small, sandboxed setup — no real accounts, no real risk — built to test one question: if an AI agent is going