---
url: >-
  https://adk.nht.io/api/@nhtio/adk/batteries/interfaces/UntrustedContentAttrs.md
description: >-
  Attribute bag rendered onto the trust envelope that wraps untrusted
  (third-party) content.
---

# Interface: UntrustedContentAttrs

Defined in: [src/batteries/llm/chat\_common/types.ts:101](https://github.com/NHTIO/ADK/blob/v1.20261003.0/src/src/batteries/llm/chat_common/types.ts#L101)

Attribute bag rendered onto the trust envelope that wraps untrusted (third-party) content.

## Properties

| Property                                   | Type                                       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | Defined in                                                                                                                                    |
| ------------------------------------------ | ------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
|  `kind`          | `string`                                   | Content classifier rendered on the envelope.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | [src/batteries/llm/chat\_common/types.ts:113](https://github.com/NHTIO/ADK/blob/v1.20261003.0/src/src/batteries/llm/chat_common/types.ts#L113) |
|  `modality?` | `"opaque"` | `"inert"` | `"extractable"` | When wrapping a [@nhtio/adk!Media](../../common/classes/Media.md)-derived text marker, the modality hazard axis derived from `media.modalityHazard`: `'inert'`, `'extractable'` (from `'extractable-instructions'`), or `'opaque'` (from `'opaque-perceptual'`). Omitted for non-media envelopes.                                                                                                                                                                                                                                                                                                 | [src/batteries/llm/chat\_common/types.ts:121](https://github.com/NHTIO/ADK/blob/v1.20261003.0/src/src/batteries/llm/chat_common/types.ts#L121) |
|  `nonce`        | `string`                                   | Nonce binding the envelope's open and close markers together — it becomes part of the tag NAME (`<..._<nonce>>`) so a model mirroring the fence cannot forge a sibling's closer. FOOTGUN: this nonce MUST be unguessable AND non-path-shaped. It is typically the source record's id; a path-shaped id (e.g. `chunk-assembly-events-9`) is copied by small models as a CITATION (`/assembly/events-9`), which a doc-path validator then rejects → re-cite loop. Mint record ids with `crypto.randomUUID()`; carry page/human provenance in `source=` (rendered before `nonce=`), never in the id. | [src/batteries/llm/chat\_common/types.ts:111](https://github.com/NHTIO/ADK/blob/v1.20261003.0/src/src/batteries/llm/chat_common/types.ts#L111) |
|  `tool?`         | `string`                                   | Name of the tool that produced the content, when applicable.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | [src/batteries/llm/chat\_common/types.ts:115](https://github.com/NHTIO/ADK/blob/v1.20261003.0/src/src/batteries/llm/chat_common/types.ts#L115) |