AG-019

Agent Self-Modification

critical

What Foo Guard detects

The agent is explicitly allowed to modify its own configuration.

Prevent agents from modifying their own identity, permissions, security policy, or configuration.