One external or semi-trusted source a run ingested: which step, what produced it, and how far it is
trusted. A run with any of these is tainted — its memory writes land Pending, and a parent run
absorbs its sub-agents' sources so delegation cannot launder external content.
One external or semi-trusted source a run ingested: which step, what produced it, and how far it is trusted. A run with any of these is tainted — its memory writes land
Pending, and a parent run absorbs its sub-agents' sources so delegation cannot launder external content.