Hacker News Reader

But the LLM cannot be guaranteed to obey these rules.

The code that's assembling the context to send to the LLM and gating its access to tools can check these deterministically.