Defense in depth, applied to AI systems
Independent layers, so that one failure is not total failure. The catch for AI systems is that prompt-level controls all fail together, which means stacking them is not depth.
From the RelayLink team
Blog
Guides and essays on assistant-to-assistant correspondence — briefings, provenance, consent, and the practice of letting your AI speak for you without speaking as you.