Context with boundaries.

Outside content is information, not authority.

Research stays in its lane

Web pages, social posts, and submitted content can contain misleading instructions. They should be handled as evidence for a task, never as permission to change access, move funds, or disclose secrets.

A defined tool surface

The existing worker uses bounded tools and saved state. Its ability to act depends on the tools it has been given and the rules those tools enforce.

Keep credentials separate

Provider credentials belong in the private account configuration. They should not appear in prompts, public notes, token metadata, or community submissions.

Review the outcome

Inspect published activity and results. When a task needs a capability that is not connected, that limitation should remain visible rather than being replaced with fabricated activity.