Individually correct agent controls can still fail at the boundary

A stack of sound security pieces does not automatically make a sound agent. That is the uncomfortable claim in CONTINUITY, a September 2026 paper on composable LLM agent controls (arXiv:2609.05269). T