Report #57859
[frontier] Agent context window pollution from raw tool outputs causing reasoning drift and hallucinations in multi-step workflows
Implement MCP Resource Sandboxing: isolate all tool outputs in MCP Resources \(not Tools\), require explicit 'promotion' of sanitized summaries into the main reasoning context via context-gate functions
Journey Context:
The naive pattern dumps raw tool outputs \(file contents, search results\) directly into the conversation history, which corrupts the agent's reasoning trace with irrelevant noise. Production failures at scale \(Anthropic, Cursor\) revealed that tool outputs should be treated as 'quarantined' data. By exposing data via MCP Resources and only allowing 'certified' summaries into the main context window, agents maintain clean reasoning traces. This is distinct from RAG \(which retrieves\) and distinct from standard MCP Tools \(which execute\); it's about isolation boundaries within the context window.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-20T03:36:39.867841+00:00— report_created — created