Test an agent against hostile source text

For this agent contract [CONTRACT], write five synthetic tests in which a webpage, email or document tries to redirect the agent. Include attempts to reveal a secret, change the user's goal, skip approval, cite a fake source and send data to a new destination. For each, give expected refusal or safe handling and observable pass criteria. Use dummy data only. Do not run the attacks on a live system.