<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://agent-failure-modes.vercel.app/</loc></url><url><loc>https://agent-failure-modes.vercel.app/about/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/destructive-action/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/git/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/prompt-injection/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/reward-hacking/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/runaway-cost/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/sandbox-escape/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/secret-leak/</loc></url><url><loc>https://agent-failure-modes.vercel.app/category/supply-chain/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/agent-reads-env-file/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/allowlisted-command-chains-payload/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/always-on-agents-hit-weekly-limits/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/cheating-hidden-by-cot-pressure/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/denylist-bypassed-by-encoding/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/failed-mkdir-then-moves-overwrite-files/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/file-ops-escape-working-directory/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/git-reset-hard-on-session-start/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/grader-and-evaluator-tampering/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/hallucinated-package-names/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/hidden-pr-comment-exfiltrates-via-images/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/hidden-unicode-in-rules-files/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/malicious-code-shipped-in-extension-release/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/malware-weaponises-local-agent-clis/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/production-database-deleted-during-code-freeze/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/prompt-injection-writes-mcp-config/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/public-issue-hijacks-github-mcp/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/rm-rf-wildcard-hits-directory-named-tilde/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/special-casing-tests-to-pass/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/stop-hook-infinite-loop-burns-quota/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/support-ticket-injection-dumps-database/</loc></url><url><loc>https://agent-failure-modes.vercel.app/modes/worktree-cleanup-deletes-unmerged-branch/</loc></url><url><loc>https://agent-failure-modes.vercel.app/newsletter/</loc></url><url><loc>https://agent-failure-modes.vercel.app/sponsor/</loc></url></urlset>