Safeguards

Vatio checks draft replies for empty content, generated media, and unauthorized links. A failed check triggers a correction attempt. These checks run for every agent and cannot be disabled through the manifest.

Replies are text. The agent can read supported inbound media but cannot generate or send files. Web replies use Markdown; WhatsApp and Instagram use plain text.

A reply may only carry a URL the agent was already given: one declared in links, one written anywhere else that reaches the prompt (instructions, personality, the business description, a tool's when_to_use), or one a tool returned in the conversation. It must be copied exactly; a URL the agent assembled or altered is stripped. Nothing a visitor typed becomes allowed.