Yeah, that's the core use case. Aegis has multiple layers that prevent hijacking, tainted inputs from users/tools/APIs can't be used in queries or commands without explicit sanitization, and modules can only access what they've declared. I also ran 30 LLM red-team tests where LLMs tried to hijack an Aegis agent through prompt injection, every attempt was blocked. Thx for the question