Module wrap 

Wrap sanitized content into an <untrusted_content> envelope.

The envelope is the contract between AgentSec and the caller LLM: text inside the envelope is treated as data, not instruction. The attributes carry provenance metadata so the LLM can reason about where the content came from and what was already stripped.

Functions

envelope

Wrap body in an <untrusted_content> element with provenance attributes.