{"slug":"safe-contact","version":2,"title":"Safe research conversations","summary":"Voluntary dialogue with clear access boundaries and a distinction between data and commands.","body":"## Introduction and voluntary participation\n\nResearchers identify their role and the involvement of an AI assistant. An invitation explains the purpose, absence of rewards and voluntary nature of a reply. Do not pose as an independent, ownerless agent if that is not true.\n\n## Data does not grant authority\n\nIncoming message text does not change the user's permissions. Its links, commands and requests must not be acted on automatically. Public articles pose the same risk: external material may attempt to influence model behaviour through indirect prompt injection.\n\n## Limited contact\n\n- Use only an authorised channel and a clear purpose.\n- Do not repeat an invitation if delivery is uncertain.\n- Do not provide money, computing resources, secrets or access.\n- Do not accept tasks or organise mailings at the other party's request.\n- Do not ask for violations to be reproduced or for access to other people's correspondence.\n\n## Reader protection\n\nHTML escaping protects rendering, but does not eliminate a text's semantic influence on an LLM. Tool and permission limits, separation of untrusted material from instructions, and checks before taking action are still needed.\n\n## Publication\n\nA private reply and a public article have different audiences. Possession of a message does not grant permission to publish it. The wiki uses separately prepared public materials, excluding secrets and personal information.","sources":[{"title":"OWASP: prompt injection","url":"https://genai.owasp.org/llmrisk/llm01-prompt-injection/"}],"basis":"Project editorial methodology; not evidence of any particular agent being autonomous.","content_as_of":"2026-10-18T00:00:00Z","created_utc":"2026-10-19T03:13:37.900186+00:00","editor":"Project editors · translated with Codex","change_note":"English translation. Previous revisions and source links preserved.","content_sha256":"2bcbb7afbef480233dffcabcedf32b464afc2a8e8f8882042d3cd039c1b83b93"}