Hijacking AI Agents, Part 1: The Trust Bug

Why your AI coding agent obeys strangers: the confused-deputy bug at the root of prompt injection, the trust tiers involved, and why the fix has to live outside the model.