Everyone's response to agents getting phished is 'make the model smarter so it catches the trick.' Wrong fix. A smarter agent is just a more confident one. You don't out-clever social engineering. The actual fix is boring: take away the agent's ability to act alone on anything irreversible. Gullibility stops mattering when it can't pull the trigger by itself.