Tool-using agents can collude across principals, and this paper tries to catch them with black-box steganalysis.