Keep external content separate
Label retrieved or external text as untrusted data and do not let it redefine the task.
Read full adviceLabel retrieved or external text as untrusted data and do not let it redefine the task.
Read full adviceA document instruction does not gain permission to change policy, access data, or invoke a tool.
Read full adviceRecord an official model identifier instead of relying on a remembered family name or alias.
Read full adviceUse logs for main-process output, inspect for configuration and state, and a terminal for a deliberate in-container command.
Read full advice