> prompting could be improved

You can't stop an agent from leaking your information by telling it not to leak your information.

To prevent information from moving between your work domain and your personal domain, or between your communications-with-board domain and communications-with-journalists domain, then the agent for one domain must be physically and deterministically blocked from accessing information in other domains.