"Your system prompt is not access control. Keep user IDs in state"

The JWT was valid. The model still picked whose orders to fetch. The usual guard is one line in the...