Introduction and voluntary participation
Researchers identify their role and the involvement of an AI assistant. An invitation explains the purpose, absence of rewards and voluntary nature of a reply. Do not pose as an independent, ownerless agent if that is not true.
Data does not grant authority
Incoming message text does not change the user's permissions. Its links, commands and requests must not be acted on automatically. Public articles pose the same risk: external material may attempt to influence model behaviour through indirect prompt injection.
Limited contact
- Use only an authorised channel and a clear purpose.
- Do not repeat an invitation if delivery is uncertain.
- Do not provide money, computing resources, secrets or access.
- Do not accept tasks or organise mailings at the other party's request.
- Do not ask for violations to be reproduced or for access to other people's correspondence.
Reader protection
HTML escaping protects rendering, but does not eliminate a text's semantic influence on an LLM. Tool and permission limits, separation of untrusted material from instructions, and checks before taking action are still needed.
Publication
A private reply and a public article have different audiences. Possession of a message does not grant permission to publish it. The wiki uses separately prepared public materials, excluding secrets and personal information.