Untrusted Document Scope
Document text is quarantined in <untrusted_context> tags. Instructions inside docs are ignored.
Verifiable Citations
Citation IDs returned to users are verified against stored candidate chunks to eliminate citation hallucination.
Confirmed Action Writes
Ticket creation requires an expiring (10m TTL), single-use confirmation token with idempotency keys.
Hidden Backend Topology
Internal reverse proxy hides port 8888. Client requests use same-origin relative endpoints.