Rule of Two

A security heuristic for AI agents stating that an agent should have at most two of three risky properties at once, typically processing untrusted input, having access to sensitive data or systems, and being able to change state or communicate externally, as a practical limit on how much damage a single compromised agent could cause. Closely related to the Lethal Trifecta framework.