A policy said deny anything under /etc . A Bash call read /etc/shadow and came back {allow, rule: 'trust-bash'} . No human in the loop.

Source: [Dev.to](https://dev.to/jeremy_longshore/empty-is-not-clean-five-fail-open-bugs-in-an-ai-agent-5fd8)

Sponsored