Semantic Attacks: Exploiting What Agents See

In Map&#x2F;Territory , I covered the agent→tool boundary: what happens when an agent’s string gets interpreted by a system. Path traversal, SSRF, command injection. The execution layer. This post covers the opposite direction: world→agent. World → [perception] → Agent → [authorization] → Tool → System ^ ^ This post Map&#x2F;Territory