Trust the Brand, Lose Control: How Identity Hijacks LLM Agent Orchestration.

arXiv:2609.32635v1 Announce Type: cross Abstract: LLM agents now execute tasks end to end with permission to change real systems and increasingly orchestrate subagents that differ in capability and cost. Prior work treats the choice of subagent as an optimizat