Artifact directory

Untrusted Content Envelope

Keep retrieved text and its source separate from instructions, with stable content digests.

Agent guide