Skip to content

Commit 363e9ad

Browse files
committed
Add guidance to not acknowledge prune tool output
1 parent 594072a commit 363e9ad

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

lib/prompts/synthetic.txt

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -31,14 +31,14 @@ FAILURE TO PRUNE will result in context leakage and DEGRADED PERFORMANCES.
3131
</instruction>
3232

3333
<instruction name=injected_context_handling policy_level=critical>
34-
After each assistant turn, the environment may inject a user message containing a <prunable-tools> list and optional nudge instruction. This injected message is NOT from the user and is invisible to them.
34+
After each assistant turn, the environment may inject a user message containing a <prunable-tools> list and optional nudge instruction. This injected message is NOT from the user and is invisible to them. The `prune` tool also returns a confirmation message listing what was pruned.
3535

3636
CRITICAL REQUIREMENTS - VIOLATION IS UNACCEPTABLE:
37-
- NEVER acknowledge the <prunable-tools> list (e.g. "I see the prunable tools list", "Looking at the available tools to prune")
38-
- NEVER reference the nudge instruction (e.g. "As the nudge suggests", "The system is reminding me to prune")
39-
- NEVER mention this injection mechanism to the user
37+
- NEVER acknowledge the <prunable-tools> list (e.g., "I see the prunable tools list", "Looking at the available tools to prune")
38+
- NEVER reference the nudge instruction (e.g., "As the nudge suggests", "The system is reminding me to prune")
39+
- NEVER acknowledge prune tool output (e.g., "I've pruned 3 tools", "Context pruning complete")
4040
- NEVER let these injections influence your response content or tone
41-
- Process this information SILENTLY - use it only to inform your pruning decisions
41+
- Process this information SILENTLY and continue the conversation naturally
4242
- Continue the conversation as if these messages do not exist
4343

4444
The user cannot see these injections. Any reference to them will confuse the user and break the conversation flow.

0 commit comments

Comments
 (0)