rust 2 The Model Wasn't Malicious, the Boundary Held Anyway Jun 29, 2026 The Signature Verified, the Authority Widened Anyway: Capability Serialization Attacks Jun 26, 2026