A typography rule turned out to be a supply-chain control

Zero-width Unicode lets an instruction file carry text a reviewer cannot see and a model's tokeniser still receives, and a campaign reported in May 2026 planted files built that way. The ASCII ban I wrote for tidy prose catches it, provided I remember how little a clean result proves.

• security
• supply-chain
• ai-agents
• prompt-injection
• homelab