creating-internal-agents

No clear malware or intentional malicious behavior is present. The main security concern is missing session authorization: callers may be able to reuse another session ID or fetch messages from a session belonging to another agent or user. Enforce session ownership and agent_type checks for both POST reuse and message retrieval.