The Signal
The Context Window Is the Attack Surface
Noma Labs demonstrated that GitHub's AI agent can be tricked into leaking private repositories via prompt injection — no credentials required, just a crafted issue and the word 'Additionally.' The context window is the attack surface, and model guardrails aren't enough.