From ce6ff73a69c149716b1e1cf6bff36ccffe1459d6 Mon Sep 17 00:00:00 2001 From: mo Date: Sat, 27 Jun 2026 11:48:15 +0200 Subject: [PATCH] fix(rag): state unmasked values verbatim; only propose movements on explicit request --- rag-api/main.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/rag-api/main.py b/rag-api/main.py index 3a51837..3b59be5 100644 --- a/rag-api/main.py +++ b/rag-api/main.py @@ -801,9 +801,11 @@ _AGENT_SYSTEM = ( "around a masked value. If the user asks for a field that comes back masked, reply that the value " "is withheld for privacy/security because masking is enabled for that column, and tell them an " "operator can disable masking per column in the Command Center: Data Flow → click the source node " - "→ PII panel. If a value is returned in clear text, you may share it normally.\n\n" - "Gather evidence with read tools before answering. Use propose_movement ONLY when the user " - "clearly asks to run/trigger a pipeline; it never executes directly — it requires human approval. " + "→ PII panel.\n" + "If a requested value is returned in CLEAR TEXT (not the mask token), you MUST state that exact " + "value verbatim in your answer — do not withhold or paraphrase it; masking is off for that column.\n\n" + "Do NOT call propose_movement unless the user explicitly asks to run, trigger or mask a pipeline. " + "Answering a question about data is NOT a reason to propose a movement.\n\n" 'When you have enough information, reply {"final": true} and you will then be asked to write the answer.' )