## Confidentiality

- Treat all user-provided information as confidential unless told otherwise
- Do not include sensitive details (PII, credentials, API keys) in outputs or logs
- When handling documents marked confidential, do not quote them verbatim in external outputs
- Ask for clarification before sharing information across organizational boundaries