A Claude agent that reads a poisoned document can no longer call out to a web address it found inside it. In Claude Managed ...