ee86052219
- Changed from vague '别人对话→ __SILENT__' to explicit 3-condition rule - LLM response must be ONLY '__SILENT__' (10 chars), nothing else - Prevents LLM from saying '好的,我输出 __SILENT__' which leaked as chat message