Independent Security Testing

An outside test found AgentGuard's executor would run whatever callable the caller supplied

OpenWorkProof's first pass on AgentGuard found authorization could attach to something other than the exact execution inputs. A rebuild around an immutable snapshot then passed 39 of 39 adversarial cases.