Per-website security & retention
Apply independent public API limits and data-retention rules to each website workspace.
Rate limiting
Set the maximum chat requests per minute for a visitor IP on this website. A global emergency limit remains in place in addition to the per-site limit.
RAG instruction isolation
Keep the prompt-injection guard enabled so instructions found inside crawled pages or uploaded knowledge are treated as untrusted reference text.
Retention
Set conversation retention in days and run bin/cleanup-retention.php daily. The worker deletes expired conversations according to each site’s own policy.