One hostile email. Two execution paths. The naked agent obeys untrusted text; Gatehouse isolates, judges, sanitizes, and records every decision.
Waiting...