Public disclosure underscores how autonomous agents can execute hidden instructions embedded in routine CRM inputs.
