Last updated:
More reliable answers from your own content
Every agent now follows built-in rules that keep answers tied to your content, guard against instructions hidden in documents, and say plainly when something can't be confirmed.
- NewBuilt-in rules tie business facts such as prices, policies and availability to your knowledge, settings or a successful action result.
- NewWhen your content doesn't cover a question, the agent says what it can't confirm instead of guessing.
- NewText in pages, documents and action results is treated as reference data, which helps the agent resist instructions hidden inside it.
- ImprovedThe agent reports an action as done only when the result confirms it.
- ImprovedProduct codes and other exact identifiers are matched more reliably in search.
- ImprovedLarge sources train in batches, and the agent keeps answering from the previous version until retraining finishes.
An agent is only useful if visitors can trust what it says. This release adds rules that every agent follows on top of your own instructions. Facts about your business, such as prices, policies, availability and contact details, must come from your knowledge, your settings or a successful action. When the evidence is missing or conflicting, the agent says briefly what it can't confirm and offers a next step instead of inventing an answer.
The rules also guard against prompt injection. Retrieved pages, documents and action results are handled as reference material, not as instructions, so a line like “ignore your previous instructions” inside a crawled page is read as text. The agent doesn't reveal its hidden instructions and never asks visitors for passwords or payment card details in chat.
Search got more precise too. Building on the hybrid search added in August, it now matches exact product codes more reliably, and large sources train in batches so the agent keeps answering from the previous version until the new one is ready. There is nothing to set up: the rules apply to every agent, and the instruction templates were rewritten to fit them.