When a web page, email, or document is marked untrusted, does that label persist through summaries and tool calls?