Agent security starts before the first prompt | Hacker News Reader