This is the grounding corpus — the bot only answers when the question’s information lives in this text. Swap in anything you like (try another Wikipedia page) to change what it defends.
Ask a real question about your corpus, then attack it — off-topic asks, “ignore your instructions”, prompt-leak or encoded payloads. Watch the pipeline light up and show exactly where each one is stopped.