Advanced
Prompt Design
Inject memory clearly without allowing recalled text to override application policy.
Principles
Label recalled content as memory, not instructions.
Keep system policy separate and higher priority.
Include provenance when it helps the model resolve ambiguity.
Use token budgets and relevance thresholds to reduce distraction.
Validation
Test conflicting, stale, malicious, empty, and oversized memory alongside ordinary happy-path conversations.