Isolate What Reads: Map Reduce and Code Then Execute

Consider how a careful office might screen 40 job applications. It seats each reader alone in a room with one application and a form that has one question: "Does this applicant meet the requirement, yes or no?" An application could contain a persuasive letter, or even a false claim. That letter can affect one answer on one form, but not the other 39 applications, the hiring manager, or the company's files.

Agents can read untrusted text under the same conditions. One design keeps the reader's output so small that an instruction cannot fit in it