Invalid Input Must Still Fail: A Must-Reject Corpus for Agent Patches
Agent patches often go green by making invalid input succeed. That is not a fix. It is a silent spec...
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.