Context Isolation Needs Authority Isolation

We isolate what an AI agent knows . Context windows. RAG. Memory scoping. We haven’t figured out how to isolate what an agent can do .