The Agentic TOCTOU Gap: How Multi-Step Tool Calls Create Exploitable Race Windows

An agent checks a file's hash before processing it. Three tool calls and one sub-agent handoff later,...