Recommended defence layers
- Acoustic and Lexical Sanity Check: Transcribed speech is analyzed for meta-instruction markers prior to reaching the primary reasoning context.
- Immutable System Enclaves: Fundamental business policies (no free treatments, mandatory deposits, strict operating hours) reside in untouchable system prompts.
- Privilege-Separated Tool Execution: Even if a caller succeeds in tricking the conversational voice agent, the agent lacks write permissions to alter pricing databases.
