See everything.
Reveal nothing.

You don't trust the agent. Neither do we.

It can't steal what it doesn't have.

Every answer your agent needs, with none of the names it could leak.