Reproducible prompt-injection benchmark, CI gate, and attested evidence pipeline for tool-using AI agents.