[AI Security Frontier] Why is the 'this folder only' restriction for AI broken? Illustrating the TOCTOU problem and pathfence

Even though I checked, the secret outside was opened.I ask the AI, 'You may only touch things inside this folder.' For those ...