Part 3: Securing an AI Agent Against Its Own Input

The Threat Model My RCA agent reads Playwright trace files and reasons about their contents. Those trace files contain: Console log messages from the application Network response bodies (API data)