Context sovereignty: treat every agent input as a stranger

gerardsans · x · 2026-11-05

Continuing his agent-engineering series, the author covers team practices for keeping humans in control: keep specs and rules as plain files in your repo rather than trapped in vendor chat history (context sovereignty), with a promotion path from personal tokens to sandboxed work to budgeted production repos; and treat every external input as a stranger—models can't reliably tell ephemeral context from orders, so scrub and quarantine everything before the agent sees it.

Related event: Agent Team Engineering: Context Sovereignty and Tiered Autonomy(2 posts)→

Original post →

More from coding & agent

coding & agent channel →