How are you securing write-enabled AI agents against payload smuggling?

How are you securing write-enabled AI agents against payload smuggling?