Agents Have Boundary Issues. Your Infrastructure Shouldn't.

Why the five isolation boundaries in agent security research all point to the same conclusion: enforcement has to live outside the model. Agent security research has been fragmented — organized around attack types, benchmarks, and application domains — which makes it hard to explain why prompt injection, tool misuse, and memory poisoning keep rhyming with one another. A new survey, “Isolation as a First-Class Principle for LLM-Agent System Safety” , fixes that by asking one question of every attack and defense in the literature: where does the loss of isolation first occur?