TOPIC 04 OF 08
Boundaries and constraints
Make the edges visibleState what the system may use, what it must avoid, which rules matter, and where it should stop. Boundaries can cover sources, length, privacy, jurisdiction, dates, prohibited actions, or the need for human approval.
Use only the three attached sources. Do not add customer names. If the sources disagree, show the disagreement instead of choosing one. Stop before sending or publishing anything.
Prompt instructions are not security controls. Connected systems still need permissions, allowlists, testing, logging, and approval gates outside the prompt.
Write one use rule, one refusal rule, and one point where a person must review the result.