Who could change your agent's instructions?

Confidentiality protects sensitive state. Integrity protects the code and instructions themselves.

Related but distinct, and protection from host-level tampering doesn't stop prompt injection through documents or web pages.

$RLC