The agent’s data plane and control plane: keeping data from becoming commands (prompt injection)
How an agent’s commands (control plane) differ from the data it reads (data plane), how prompt injection works and how to defend: least rights, approval of writes, separating read from write, trusted sources.