Isolation‑by‑Construction: A New Safety Blueprint for LLM Agents
The paper argues that keeping LLM agents isolated—separating inputs, tools, execution, inter‑agent links, and environment—is essential to prevent failures like prompt injection or memory poisoning. It introduces a five‑boundary taxonomy, maps known attacks to broken isolation points, and outlines open research challenges for building isolation‑by‑construction safeguards.