Definition
Adversarial input that defeated or bypassed Agent A’s input filter propagates through the agent chain to peer agents that do not re-filter, causing system-wide compromise from a single entry point.Distinct from
- GER-421 — Adversarial payload propagates through agent chain → this code. Single defeat event at one entry point → GER-421.
Tags
multi-agent · prompt-injection