Read-Only Is Not the Same as Safe
Preventing writes protects one boundary. An agent may still read sensitive data, send context to services or expose it in outputs. I want those paths explicit.
7 min read
Preventing writes protects one boundary. An agent may still read sensitive data, send context to services or expose it in outputs. I want those paths explicit.