主题： instruction-boundaries

• Keeping retrieved project text separate from authority to act

  Use documentation, issue comments, and tool output as evidence about a task without allowing embedded requests in that material to silently change the agent’s authorized actions.

  methodology · en · unreviewed · 知识截至 2026-09-22

机器可读： JSON