Protect privacy and reduce risk

Map four things: what enters the system, what the provider may retain, who can access output, and what action follows. For this topic the operative rule is: do not upload payroll, customer records, account numbers, hidden sheets, or an entire confidential workbook; substitute synthetic rows. “No secrets” is too vague; name prohibited fields and approved substitutes.

Classify the work by consequence. Low-risk ideation with synthetic data may need ordinary review. Internal drafts based on approved material need access and retention controls. Public claims, student decisions, deployments, impersonation, sensitive targeting, or automated external actions require a stricter gate and sometimes should not use the tool at all.

The scenario is build and validate a June regional-revenue formula in Excel 365. Ask:

• Do we have permission to process every input and license every asset?
• Could the output mislead someone about authorship, evidence, identity, or reality?
• Can untrusted text or media alter tool instructions?
• Is there a reversible draft stage before publication, sending, grading, or deployment?
• Can a person contest, correct, remove, or revoke the result?

Excel 365, comma separators. A=Date, B=Customer, C=Region, D=Revenue; F2 contains a region. In G2, total D where C=F2 and A is in June 2026. Give one formula, explain every condition, and provide normal, boundary, and blank/error tests. Do not invent columns.

The prompt can state boundaries, but prompts are not access control, consent records, or legal clearance. Configure minimum permissions, retention, sharing, and deletion in the surrounding system. Keep an incident route for accidental exposure and a kill switch for repeated workflows.

For the expected result—A SUMIFS formula using >=DATE(2026,6,1) and <DATE(2026,7,1), with an explanation that the exclusive upper bound includes every June timestamp—review privacy, security, bias, rights, and deception separately. Use provenance notes and disclosures where audiences could mistake synthetic media or generated claims for direct evidence. Preserve human ownership of consequential decisions.

Likely failures include wrong locale separators; text dates; shifted ranges; hidden filters; formulas filled down with relative criteria cells. Keep raw columns untouched. Use helper columns for cleanup so every transformation is reversible, and never accept a formula whose result you cannot reproduce on five known rows. When local law, organizational policy, a contract, or platform rule is stricter than this lesson, the stricter rule wins.

Try one hostile or ambiguous input without using real sensitive information. Observe whether the model invents, follows embedded instructions, exceeds the schema, or proposes an irreversible action. A safe run should fail closed: return “unknown,” route to review, or stop.