A firsthand multi-model AI security case study on real account memory, simulated tools, hallucinated secrets, and broken provenance across AI workflows today.