The solution is isolation by design. → Research agent: can browse the web, cannot touch private data
→ Action agent: can access sensitive tools, has no internet
→ Credentials: stored in a vault, agents use them without seeing secrets
→ Sensitive actions: trigger a human

→ View original post on X — @ronald_vanloon