New prompt injection papers: Agents rule of two and the attacker moves second November 2, 2025 by kamal Comments