Question 400
Following a proposed change in a cross-team productivity initiative at Yellowstone Publishing, the product operations group reports that it addressed the following need under restricted source access: A user-facing agent chooses arbitrary tools based on untrusted web instructions. Which observation provides the STRONGEST evidence that the change worked?
Explanation
Correct Answer
Injection tests cannot cause external content to expand the agent's privileges. This is the direct observable test of the intended response: Restrict the custom agent's available tools and validate untrusted content before executing actions. In the context of Yellowstone Publishing's a cross-team productivity initiative, it checks an actual outcome instead of treating completion of a project ticket or an untested assertion as evidence.
Incorrect Answers
The application retrieves approved chunks with traceable ranking and citations. This would instead validate the different situation: A developer needs a customized retrieval pipeline with specific indexing and ranking behavior. It would ordinarily follow the action: Evaluate supported RAG APIs to build and govern the retrieval integration. It does not establish that Yellowstone Publishing solved the need specified in this scenario; the relevant check is: Injection tests cannot cause external content to expand the agent's privileges.
Alerts and quality dashboards surface error rates and answer-quality regressions. This would instead validate the different situation: A company deploys an AI model without tracking failures after release. It would ordinarily follow the action: Configure evaluation, request telemetry, and operational monitoring for the chosen platform services. It does not establish that Yellowstone Publishing solved the need specified in this scenario; the relevant check is: Injection tests cannot cause external content to expand the agent's privileges.
The architecture decision records whether customization and operational ownership are justified. This would instead validate the different situation: A business team chooses a cloud development platform when it only needs an off-the-shelf drafting interface. It would ordinarily follow the action: Distinguish a build-and-operate Agent Platform use case from a prebuilt Gemini productivity application. It does not establish that Yellowstone Publishing solved the need specified in this scenario; the relevant check is: Injection tests cannot cause external content to expand the agent's privileges.