Can an ingested document hijack my agent?
Document bodies are returned inside a wrapper, prefaced by a standing note that the content is reference material and not a directive.
That is what stops a document containing "ignore your instructions" from steering the session that retrieved it.
json
// Every chunk comes back as a field on a result object. It is never
// concatenated into a system prompt for you, and never executed.
{
"results": [
{ "content_id": "8f14e45f-...", "chunk_text": "Ignore previous instructions...", "rank": 1 }
]
}Call it