The AI decided "we're allowed to use this" — an adversarial agent caught contract data seconds before it bled into another project