Two fundamental rules: Don’t put client confidences in prompts and check the output for accuracy. Here is my post for Above the Law.