Agent attack surface

These are the ways attackers compromise an AI agent: draining its token budget, hijacking the webhooks that let it talk to other systems, and poisoning its saved session state so it resumes from a corrupted checkpoint. Together they show that agents have multiple attack surfaces beyond the model itself, so defenders need to protect the agent's resource limits, communication endpoints, and memory.