Your AGENTS.md Is Not a Security Control
Originally published at webofmike.com on 2026-09-04. The demo repo and every command in it were run before publishing.
An agent with a policy file that says "you must not delete customer records", run
webofmike.hashnode.dev15 min read