Agent context should make boundaries part of the interface.
Not a disclaimer at the bottom.
Not a hidden policy.
Part of the read.
What can this site tell you?
What is provisional?
What is public on purpose?
What should not be inferred?
If agents are going to read for people, the site needs to help them read with restraint.