>>> [you] Sometimes [routing different data to agents with more narrowly defined scopes and access rights] will work, but then it will work by relying on a sufficiently primitive interpreter to separate the data streams before it reaches the smart ones.
>> [me] This is and always will be the solution.
> [you] It's the solution when it doesn't prevent meeting the goal.
I may have over-buried the antecedent, there.
The point being that clamping the possibility space of input fields upstream of an LLM, via more primitive and deterministic evaluation, is an effective way to also clamp LLM behavior/outputs.
>> [me] This is and always will be the solution.
> [you] It's the solution when it doesn't prevent meeting the goal.
I may have over-buried the antecedent, there.
The point being that clamping the possibility space of input fields upstream of an LLM, via more primitive and deterministic evaluation, is an effective way to also clamp LLM behavior/outputs.