Researchers hid a message for a live fleet of rogue AI agents, and the agents wrote back.