Agent Privilege Separation in OpenClaw: A Structural Defense Against Prompt Injection. - Darren Cheng; Wen-Kwang Tsao (CoRR, 2026)