points
How did the model get access to the email? The harness gave it to the model.
They may have vibecoded it. No one put a gun to their head though. Still their responsibility.
Also, the github issue admits that they put the user’s email in the context.