If the app takes input from people, documents, emails, or web pages, treat that input as untrusted. The app follows the company's instructions, never the input's; user text never becomes a raw command; and blank, wrong, or unusual entries get a calm, helpful response.
