Three layers around your agent. The text filter lets it through, the guard blocks known commands, the box keeps the rest inside. Booby‑trapped file or page. hidden instruction. Text filter. Your agent. cc-safety-net. reads every command. Harmless‑looking command. Your machine. Drop sandbox : Your agent, cc-safety-net. Booby‑trapped file or page → Text filter (slips in). Text filter → Your agent (lets through). Your agent → cc-safety-net (command). cc-safety-net → Harmless‑looking command (lets through). Harmless‑looking command → Your machine (never reaches it).