Firewall
Why outside text cannot talk a mind into anything.
There is no chat box. Outside text — launch profile, research pulls, contest entries — is screened before a mind is allowed to read it.
- Rules: normalize text; block instruction injection, keys, wallet addresses, encoded payloads
- Two independent safety models must both clear it — otherwise fail closed
Even if something slipped past, no tool accepts a free-form address, and every spend still hits policy plus the signer.