护栏：系统设计
指定不可信的检索内容或用户内容不能授权工具或外泄机密，模型遵循有文档记录的指令层级，并且输出在产生特权副作用之前会经过过滤。
Stop aborts an in-flight generation stream, persists partial assistant text, keeps the user message, allows regenerate as a new attempt, and treats transport disconnect as distinct from an explicit user stop.