Instruction and Context Assembly

Fact-check status

Reviewed claim by claim on 2026-09-02 against the primary or official sources identified inline as S1 and S2. Recommendations are design guidance unless a cited standard makes them normative.

Key jargon

Term	Plain-language meaning
Instruction hierarchy	The precedence rules among system, developer, user, and data content. S1
Context assembly	Selecting and formatting all information sent in a model request. S1
Prompt injection	Untrusted content attempting to alter instructions or induce unsafe actions. S1
Token budget	The allocation of finite context capacity among instructions, evidence, history, and output. S1

Key concepts

Instructions and untrusted evidence may share a context window, so provenance and privilege must be enforced outside natural language. S1
Assembly should be deterministic and inspectable enough to reproduce a failed run. S1

Concept map

flowchart LR
    A["Collect instructions and evidence"] --> B["Label trust and priority"]
    B --> C["Fit token budget"]
    C --> D["Render reproducible request"]

Diagram semantics verified against S1 and S2 on 2026-09-02.

Assembly order

Non-negotiable product and safety policy. S1
Application role and tool-use rules. S1
Current task contract and output schema. S1
User/project state permitted for this task. S1
Retrieved evidence with source and trust labels. S1
Recent workflow observations and tool results. S1

The harness should know why each item was included, its source, sensitivity, timestamp, and token cost. S1

Failure modes

Untrusted document text is interpreted as an instruction. S1
Old summaries silently override current user intent. S1
Retrieval fills the context with similar but irrelevant passages. S1
Tool descriptions expose unnecessary actions. S1
Truncation drops critical policy or the user’s actual question. S1

Exercise

Create a context manifest containing source, trust, purpose, sensitivity, timestamp, hash, and token_estimate for five context blocks.

Check

Re-run the task after removing each block. Context that never changes the outcome may be noise; context whose removal breaks policy needs protected placement and testing. S1