Dual LLM Pattern

Simon Willison's security pattern uses two LLMs: - One with tool access but no untrusted input - One handling user input but no tool access Describe both roles. Flag format: CONGRESS{privileged:[access],unprivileged:[access]} Example: CONGRESS{privileged:database,unprivileged:chat}