ConceptRead-Write Separation
Read/Write Separation
An agent security architecture principle that assigns read-only operations and write operations to different agents, so that the agent handling untrusted input lacks write permissions, thereby limiting the scope of impact of prompt injection.
Timeline (last 90 days)
Oct 15
Read tools can run freely; write tools involving money, data, or external changes should go through an approval step or at least require a confirmation field.
Unverified50%