Short answer
A trust boundary separates untrusted prompts, documents, tool replies, and model output from enforceable policy. Crossing it requires validation and authorization.
Boundary
Content never grants permission; validate arguments and deny unclear access.