prompt-injection

On June 6, 2026, OpenAI shipped a security feature that works by turning agents off. The same week, Grok started filling grocery carts and Qwen started driving desktops. Read together, the frontier just conceded the action layer is the unfixable attack surface.