“The agent walked the standard product browse path, then pivoted into the inventory API at +2.18s. After three successful inventory queries it tried to access an admin endpoint three times in six seconds — the URL pattern suggests it was probing for an unprotected admin route, not following a link.”