DelegateGuard: Purpose-Bound Capabilities for Delegated LLM Agent Workflows

Phat T. Tran-Truong, Ha Vo, Nhut Tran +2

\textbf{(Context)} LLM agents increasingly delegate subtasks while holding authority over sensitive data, creating confused-deputy risks: an injected delegate can exfiltrate data,…