LLM relays can read prompts and rewrite tool calls. Use this evidence-based audit contract before production data or agents cross a proxy.
A 2026 study decoded 315,320 client-side reasoning blocks. The durable lesson is that encryption needs identity, context, expiry, and replay controls.