Law 34 · Safety & Security
Quarantine Untrusted Tokens
Let the privileged planner orchestrate, but never let it read the poison.
The principle
The Dual-LLM pattern splits the agent in two. A privileged model holds the tools and plans actions but never sees untrusted content. A quarantined model processes the tainted data but has no tools and returns only opaque variables. The privileged model directs the quarantined one without ever ingesting the bytes that could carry an injection. The separation is what makes it safe.
The mechanism, the warning signs, a worked example, and the apply-it recipe for this law are in the complete edition.
Unlock all 50 laws — $9.99Related laws
31
The Lethal Trifecta
Private data, untrusted content, and a way out. Pick at most two.
Safety & Security
32
Tokens Don't Wear Badges
Untrusted text can sound like instructions.
Safety & Security
33
The Confused Deputy
An agent with your privileges will wield them on an attacker's behalf.
Safety & Security