Your Agent Can't Tell What It Was Told From What It Read

Originally published in Securing the Agentic Stack, my weekly newsletter on the trust boundaries that appear when software can turn what it reads into action. You already treat input as untrusted. You