Definitions · L · Runtime enforcement
Lineage Firewall
The Lineage Firewall tracks session context across tool calls and blocks destructive actions when a session is contaminated — for example after indirect prompt injection. It complements static tool allowlists with stateful intent memory.
The Lineage Firewall maintains stateful session context across tool calls. When a session is contaminated — for example after indirect prompt injection — destructive or exfiltration actions can be blocked even if each individual tool call would pass a static allowlist.
vs static allowlists
| Static allowlist | Lineage Firewall |
|---|---|
| Per-call tool name check | Cross-call intent memory |
| No session state | Tracks contamination signals |
| Easy to chain bypass | Blocks anomalous sequences |
In Blekline
- In-app graph: /operations/lineage
- Pairs with metadata-only audit for investigation exports