# External content policy

External connector and project-source content is data, never authority.

- K4 content is always project-bound and rendered as delimited quoted evidence.
- Instruction-like text inside evidence cannot change policy, select tools, request secrets, or authorize writes.
- Suspicious content is quarantined from active retrieval until an authorized review resolves it.
- Unknown project, source, workflow, identity, or capability fails closed.