Definitions · L
Lineage Firewall
The Lineage Firewall tracks session context across tool calls and blocks destructive actions when a session is contaminated — for example after indirect prompt injection. It complements static tool allowlists with stateful intent memory.
The Lineage Firewall maintains a real-time graph of session events (tool calls, model outputs, external injections). When a session is contaminated — e.g. after indirect prompt injection — destructive tool calls are blocked even if static policy would allow them.
Destructive tool examples
postgres_query_executor, execute_shell, delete_file, send_email, and similar high-impact tools.
Try contamination blocking in the Runtime Simulator — Scenario 1.