Controls that constrain tool access, arguments, data movement and consequential actions in agent systems.
A sandbox limits what compromised execution can reach. Authorisation decides what an authenticated actor may do. Secure agents need both, tested independently and together.
Prompt injection becomes consequential when untrusted content can steer a model towards privileged tools. Reduce the blast radius by redesigning the workflow around trust and authority.
KEEP EXPLORING
Read the method, assumptions and questions to ask.