CaMeL

A Google DeepMind research system in which the privileged model writes a small program and an interpreter tracks which values came from untrusted sources. It refuses to let those values reach sensitive tools.