even if you say use RAG or something to a source you can trust, there's no guarantee the agent will still use exactly what the source has.

i can't even get agents to remember core instructions like "use jq instead of writing a python script to parse some json"..