Type a prompt, press Enter, watch it run. The coding agent gets a normal task — but the content it reads is poisoned. See it with no guard, with the guard, and with the fine-tuned reviewer.