What it still cannot do

Run answer.ts ten times on the hydrant question and read the ten replies. Most cite MD-S01 and say 15. Now ask yourself what would stop a reply that cited MD-S01 and said 20, or that cited an id the corpus does not have, or that answered a question about Ohio from a Maryland law.

The first rule. That is all. The rule is an instruction, the model follows instructions well, and “well” is a rate. Chapter 1’s warning applies in full: a reply that breaks the rule arrives with stop_reason: "end_turn", a valid JSON body and the same register as every other reply. Nothing in this chapter can tell them apart.

The next chapter can.