Unverified50% confidenceCautionExact time
Trace references should not become a channel for bypassing document permissions, and reason codes should not accidentally leak sensitive source content.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
Unverified应把检索到的内容（邮件、附件、文档）视为不可信，敏感凭证不应出现在模型可见的上下文中66% similarUnverifiedThe core principle of defending against prompt injection is to always treat document content as data rather than instructions; the application's security policy should not be overridden by any text in the document.66% similarUnverified实践中不推荐对prompt做字符级正则脱敏后仍记录原文——正则难以覆盖全部敏感模式且会遗漏语义级泄露；更稳妥的方案是整段不落span，仅在安全日志库中存储并关联trace ID。66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1056332API
curl https://kongchang.com/api/v1/knowledge/claims/1056332MCP
get_claim(id=1056332)