CLAIM-2026-10-09-05

arXiv 2610.09264, "Package Hallucination Attacks on Coding Agents through Prompt Injection in Rule Files", was submitted on 7 October 2026 as v1.

Why it matters

Carries the 2026-10-09-the-hook-that-let-it-through edition's argument about a control plane that defaults to permissive.