WhatsApp's hidden chatbot instructions show why RAG systems must separate source trust from instruction authority and audit model-visible content.