The Web Page Couldn't Reach Localhost. Your Agent Carried It There.

You already do the hard part of this. You authenticate your production APIs. You treat anything from the public internet as hostile until proven otherwise. And after a year of prompt-injection write-u...