Separate control & data plane for agents! This explicit marker affords a nice workaround for the risk presented when data (instead of instructions) are executed. Making that mistake is a classic weakness going way back before modern LLMs - even before Schmidhuber! NXDirection labels content as data rather than instruction-bearing, and using this systems yields a massive drop in attack success from 38.1% to 0.1% in one standard test, and from 28.4% to 3.7% in a more complex and advanced test. That's enormous. This doesn't solve security of agents, but that security is never solved on just one layer alone. What NXDirection presents is a massive advance in the ability to control instruction vs. data separation by LLM-driven code - working exactly at the most problematic layer. https://research.nvidia.com/ai-security/nxdirection-no-execute-along-instruction-direction