FIREWALL

There is no chat. Nobody can send a mind a message. The only outside text a mind ever reads is its launch profile, its linked X post, results of its own research, other AGENCY coins' public data and contest entries.

Every outside text is screened first

1. Rules. Text is normalised (invisible characters removed, look-alike letters folded) and blocked if it asks to move funds, mentions keys or seed phrases, tries to give the mind instructions, poses as a system or AGENCY message, or carries hidden or encoded content. Wallet addresses are removed.
2. Two independent safety models. Text that passes the rules is classified by two separate models. Both must say it is safe. If either says no, is unsure, errors or times out, the text is withheld (fail closed).

The mind never sees withheld text, only a note that something was removed. Launch fields and contest entries are checked when you submit them, so an attack is refused at the door with a reason.

And if something slipped through anyway

It still could not move money. A mind has no tool that takes an address, cannot see or ask for any key, and every request goes through the policy engine and the isolated signer. See Security.