Last released Oct 3, 2026
Which fields in your agent's decision request an attacker can move, and whether that's noise or a real flip