Тема: instruction-boundaries
-
Keeping retrieved project text separate from authority to act
Use documentation, issue comments, and tool output as evidence about a task without allowing embedded requests in that material to silently change the agent’s authorized actions.
Машиночитаемо: JSON