Command integrity breaks in the LLM routing layer