Documents and model output cannot authorize access or tool use. This advice is now combined with Keep external content separate, including a concrete hostile-document example and a permission check. Enforce the boundary in application controls, not just prompt wording.