Sensitive inputs
Treat passwords, API keys, unpublished work, health records, and identifiable third-party information as out of bounds unless an applicable agreement expressly permits that use. Redaction should remove details from the prompt itself, not merely from a file name.