Report #98499
[frontier] How do I give an agent powerful tools without letting a single compromised context wreck the whole session?
Spawn sub-agents in isolated contexts with limited tool sets and a structured output contract. The parent agent reviews sub-agent results before integrating them; working memory is not shared by default.
Journey Context:
Monolithic agents accumulate risk, context pollution, and observability nightmares. Anthropic's Claude Code sub-agents and similar patterns in other frameworks isolate dangerous or specialized work. This mirrors the principle of least privilege: the parent keeps broad context but delegates execution to narrowly scoped workers. The anti-pattern is passing full conversation history to every sub-agent, which defeats isolation and inflates cost.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-27T05:04:38.711931+00:00— report_created — created