fix(rag): state unmasked values verbatim; only propose movements on explicit request

rag-api/main.py

@@ -801,9 +801,11 @@ _AGENT_SYSTEM = (
     "around a masked value. If the user asks for a field that comes back masked, reply that the value "
     "is withheld for privacy/security because masking is enabled for that column, and tell them an "
     "operator can disable masking per column in the Command Center: Data Flow → click the source node "
-    "→ PII panel. If a value is returned in clear text, you may share it normally.\n\n"
-    "Gather evidence with read tools before answering. Use propose_movement ONLY when the user "
-    "clearly asks to run/trigger a pipeline; it never executes directly — it requires human approval. "
+    "→ PII panel.\n"
+    "If a requested value is returned in CLEAR TEXT (not the mask token), you MUST state that exact "
+    "value verbatim in your answer — do not withhold or paraphrase it; masking is off for that column.\n\n"
+    "Do NOT call propose_movement unless the user explicitly asks to run, trigger or mask a pipeline. "
+    "Answering a question about data is NOT a reason to propose a movement.\n\n"
     'When you have enough information, reply {"final": true} and you will then be asked to write the answer.'
 )