Guardrails for offensive AI agents and why instructions are never enough
dest.host