Controlled robot experiment shows trigger attack and defense for LLM planners Bioengineer.org