Trust is not a policy page — it is architecture. Here is exactly what the advisor guarantees, and where the limits live.
A product name, a price, a stock state, and a measurement come from your published pages. The advisor does not invent them. When a visitor asks what a material or a property means, and you sell it, the advisor explains the idea. If your pages already explain it, that is the answer. If they do not, it explains in general terms and says so when it is unsure.
Outbound links are verified against your site's origin before they render. A visitor can never be steered off-site by the advisor.
When a model is unavailable or a limit is reached, the advisor falls back to deterministic grounded answers or pauses with a clear message. It never fabricates to fill silence.
Each site's knowledge is isolated by workspace and every query stays within that boundary. We do not mix catalogue information between sites.
Your embed key is public by nature — it lives in your page's HTML — so it is origin-pinned to your own domain, shown openly in your console, and revoked in one action. There is no hidden credential to leak, and no surprise line item to find.
Add your public site, run one scan, and put the advisor in front of real visitors. The playground is there when you want to rehearse first.