Cross-tenant retrieve is more common than a jailbreak

The travel-reimbursement cap was in the store. Another department used the same window and asked the number out, citation attached. Isolation that is only “do not answer other customers' documents” in the prompt fails once retrieve has seen the paragraphs. Seen, they are this turn's question. A warning will not stop a number already seen.