Agent Goal Hijack (ASI01:2026)

How attackers rewrite an agent's objective — and the three layers that stop it

Direct injection, hidden instructions in documents and RAG, and poisoned tool output — with worked attack traces, secure-code patterns, detection signals, and a red-team drill.