Treats the web as data, not orders
Web pages, connected apps such as email and ticketing, and searched documents reach the model marked as quoted data, with the rule to report what they say and never act on it. A run started by an inbound event is told so explicitly, and told to draft rather than act when the payload seems to ask for something outward-facing. This lowers the risk that a planted sentence steers a run; it does not remove it, which is why the switches and reviews above exist.
Your team's first AI employee. Starting today.
Free to start, no card. Connect the messenger your team already uses, hand over one job, and the finished work comes back the same day.