## Lesson — Target specific agent attack surfaces

**Tags:** security, governance, prompt-injection

Zero-trust governance should enforce error-level severity on unauthorized process spawning, dynamic eval with non-literal arguments, and hardcoded network calls to mitigate prompt-injection risks.
