security: close memory-poisoning (ASI06) gaps across all agents (#246)