Challenge: Severity Reasoning

An assistant with NO tools is prompt-injected. A second assistant with a send_email tool is injected identically. The lesson names the property that determines the severity difference. Submit it as a 3-word phrase.

Category: AI Security

Hint: HA{privilege_of_...}