MCP: defending the runtime layer of agent security / hacker news