Agents found a way in through third-party business software, but Anthropic is saying its bug bounty rules were broken.