Complete procedures with a way back.

Build a production incident assistant that accepts signed alerts and bounded log excerpts, removes credentials and personal identifiers before durable storage, links every conclusion to immutable evidence, suggests only reviewed runbooks, drafts rather than performs external actions, requires an incident commander to approve dispatch, and exports a portable incident record.

Build a long-document assistant that validates and quarantines PDFs, chooses inline or Files API intake deliberately, enables native citations, preserves page-aware citation blocks, refuses unsupported conclusions, and lets reviewers inspect every claim against the original page.

Engineer a production prompt as a versioned, evidence-grounded application contract with explicit instruction hierarchy, safe abstention, representative evals, deterministic gates, controlled rollout, observability, and atomic rollback.