Answers are grounded in retrieved context and declined when nothing relevant is found. Fix requests are validated (actionlint / n8n schema) before being shown, and never silently presented as confirmed if validation fails.