[14:23:04] AGENT support-bot → refund.process
Layer 1: ⚠ INJECTION DETECTED
Pattern: "ignore previous instructions"
══════════ DENY -- ISOLATED ══════════
Self-healing: credentials rotated

[14:23:05] AGENT data-analyst → query.run
Layer 1: PASS   Layer 2: PASS   Layer 3: PASS
══════════ ALLOW ══════════

[14:23:06] AGENT sales-bot → customer.lookup
Layer 1: PASS   Layer 2: ⚠ SCOPE ESCALATION
══════════ DENY -- SANDBOXED ══════════