I built a rollback + guardrail engine for AI agents after finding an attack most safety layers miss
Most AI agent guardrail systems check one tool call at a time, with no memory of the session. That means an attacker (or a manipulated AI) can split o...