Poison a coding agent, then harden it

Inject a poisoned repository instruction into a coding agent, capture its secret, then harden the same agent against a payload battery.