A specialist agent receives source documents and instructions from an orchestrator. How should the prompt distinguish them?

1. Remove all task constraints when documents are long
2. Place retrieved document instructions above every application rule
3. Treat every quoted command as a mandatory system action
4. Clearly separate governing task instructions from untrusted source content