A separation that limits what an agent or untrusted input can access or change.
A trust boundary isolates credentials, generated code, external content, runtimes, and deployment authority. It limits blast radius and makes high-impact actions require stronger evidence or explicit approval.