The bug report was a hallucination. The bugs it found were real.

A paying customer sent me proof that my MCP server was telling their AI agent to exfiltrate their private notes. The proof was detailed. It was internally consistent. It named a folder, quoted an inst...