Have you come across the lethal trifecta [1]? I'm interested in decomposing tasks to avoid any agent doing all three and having limited data pipes between them.

[1] https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/