Stateful Online Monitoring Catches Distributed Agent Attacks — ThinkLLM