How does Diagrid Catalyst prevent prompt injection attacks from compromising agent tool calls?

Catalyst enforces tool authorization policies that decouple agent identity from tool access. Even if a prompt injection tricks the agent into requesting a tool, Catalyst’s policy engine checks whether the agent’s workload identity is permitted to invoke that tool. Unauthorized calls are blocked before execution. This containment means injected prompts cannot escalate to arbitrary tool use; the blast radius is limited to the tools explicitly authorized for that agent identity.