de702da759
Agent can look up actual records via the Command Center, but masked column values are redacted server-side (never reach the model). System prompt forbids revealing, guessing or reconstructing masked values and explains how to disable masking.