Same curl, two verdicts: taint tracking for coding agents

Here's the case that convinced me a static allowlist isn't enough for coding agents. An agent reads...