|
|
|
|
|
|
by khalic
17 days ago
|
|
|
This model is already not perfect, and not at all built for agents. The only way to secure an agent is an air-gap with the execution layer. Treat it like text, and the problem never arises until you “interpret” the agent output in a more limited environment than the OS |
|
|