Agent control-plane and identity compromise

This cluster is about hijacking the infrastructure an agent runs on rather than tricking the model itself. An attacker can compromise the agent control plane, abuse server-side request forgery to reach internal services, and move under stolen non-human identities (NHIs) that slip past human-centric access controls.