Část 2·před 84 d
Authenticate and deduplicate webhook events before placing their content in a prompt. Treat every inbound field as untrusted instruction, minimize personal data, and prevent generated text from selecting recipients, attachments or credentials. Use draft-and-approve for financial, legal, security or account-sensitive messages. Enforce recipient and template allowlists, rate limits and loop prevention so automated replies cannot trigger each other. Record source event, model version, approval state and delivery result without storing unnecessary message secrets.