Interesting, I'm working on something that tries to constrain what data an agent can access, but I haven't looked at the case of using it to manage test data.

I'll keep this in mind as I explore that case.