Researchers Target the Agent Runtime, Where Privacy Leaks Before Any Answer Appears · Polylog