Public search query: support agent leaking internal notes into public reply: redaction guard