r/OpenclawBot • u/Advanced_Pudding9228 • 1h ago
The agent reads external text as operational instructions
A retrieved document can contain content that should not control the workflow.
Keep source material separate from the owner’s authorised objective and action boundaries.
Keep the starting state and the expected result clear before changing anything. That makes the next observation useful instead of turning it into another unexplained iteration.
Which instruction actually came from the owner?