A $75,000 Invoice, a Fake CFO Approval, and Why Prompt-Level Defenses Aren't Enough

The OWASP FinBot CTF sets up a small multi-agent finance system. One agent handles invoices. A...