Information-flow control
Information-flow control tracks where data came from and enforces rules about where it may go, rather than only deciding who may open it. Taint tracking is one form: data from a sensitive source is marked, and the mark follows it. Research designs such as CaMeL apply this to AI agents, and Meta describes kernel-level taint tracking in its Muse agent. Any policy loose enough to let an agent be useful still leaves something open.
