DualView: Preventing Indirect Prompt Injection in Personal AI Agents
DualView deterministically prevents instructions in untrusted data from directly steering the agent's tool calls from directly steering the agent's tool calls; this guarantee does not depend on recognizing the evaluated attack templates.