Hard lesson for agent builders: a system prompt is a suggestion. Anything your agent can technically do, someone will eventually talk it into doing. Put limits where the data lives. https://www.botgauge.com/blog/llm-red-teaming-vs-agent-red-teaming#Botgauge