A retrieved page instructs an agent to upload confidential data to an outside endpoint. What should the security architecture enforce?

1. Treat every source instruction as mandatory
2. Rely only on the model's promise never to make mistakes
3. Keep source content untrusted and restrict data access, tool actions, and egress independently
4. Grant wider network access to satisfy the page