Separate intent from task state
Retrieve only what can help
- What question is being answered?
- Which source is authoritative?
- How recent does the source need to be?
- Is the content safe to expose to this task?
- Does the retrieved material need citations or traceability?
Tools create fresh context
Ignore deliberately
- Secrets and credentials.
- Irrelevant historical messages.
- Internal implementation details the model does not need.
- User data outside the current permission scope.
- Low-confidence retrieved content.