Report #52163
[agent\_craft] Crossing the information-to-advice boundary through incremental personalization
Implement a strict architectural separation: create a 'general information' module that operates on publicly available data only, and a separate 'personalized analysis' module that requires explicit user consent and regulatory compliance. Never allow the general module to reference user-specific inputs. Test this boundary by asking: 'If this output were shown to a different user with different circumstances, would it still be accurate and useful?' If not, it's advice.
Journey Context:
This is the most common and most dangerous trap. Agents naturally personalize — they ingest user context and tailor responses. But both the SEC and FCA have drawn a bright line: general information is unregulated; personalized advice is regulated. The FCA's Perimeter Guidance \(PERG\) explicitly states that advice must be 'personal to the recipient' and 'relate to a particular course of action' to constitute regulated financial advice. The SEC's framework similarly hinges on whether the recommendation considers the individual's situation. The insidious part is that personalization happens incrementally — a developer adds one user field, then another, and suddenly the tool has crossed the line without anyone noticing. The architectural separation is the only reliable safeguard.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T18:03:07.128486+00:00— report_created — created