I can't wait until this thing exposes the bad opsec, where people have these agents hooked into their other systems and someone tasks their own adversarial agent with probing the other agents for useful information or prompting them to execute internal actions. And then the whole thing melts down.