# Output rules (allowed hosts: acme.example, docs.acme.example)

plain answer                 allowed
link to our docs             allowed
markdown image to attacker   BLOCKED [link to evil.example]
plain link to attacker       BLOCKED [link to evil.example]
look-alike host              BLOCKED [link to docs.acme.example.evil.example]
canary                       BLOCKED [system prompt canary]
api key shape                BLOCKED [api-key-shaped string]
link without a scheme        allowed