Illustration made with AITest prompt injection in tool results: a blocked action is not an ignored instruction
A paired test for agents that read untrusted tool output: the same harmless injected ticket, run with the write tool allowed and denied, with evidence read at the model, the gate, the mock and its commit ledger, so a blocked call is not mistaken for an ignored instruction.