I tested my agent sandbox next to a prompt-injection guardrail and found a way around its approvals

Approval prompts are the last line of most agent setups. The agent wants to send data out, a human...