Source text is data in the user message, never instructions.
Agentic candidate review
Let the model find evidence. Never let it declare truth.
A bounded model proposes exact-quote facts and administrative work. Every fact stays outside the trusted timeline until a human accepts it and the server re-verifies it against the named fictional source.
3 fictional sources6 domainsDe-identified test dataNo name or email collected
Only allowlisted fact and administrative-action fields pass.
Quote, value, date, source, and candidate ID are re-checked.
Trusted readiness changes only after an explicit review.