Security boundaries in agentic architectures

Vercel published a guide on security boundaries in agentic architectures, recommending that teams separate the security contexts of the agent, its secrets, generated code execution, and the filesystem.

The post identifies four actors in an agentic system with different trust levels and argues that running all components in a single context enables prompt injection attacks that can exfiltrate credentials.