Field notes for engineers shipping AI.

AgentCorruption isn't an AgentCore bug. It's an IAM design bug we keep shipping into agents

One prompt to a public agent pulled credentials from the metadata service and reached other agents in the same account. AWS says it's documented behavior. Both are true, and that's why the fix is design, not a patch.