Added research on the web to the BeyondFacts Lab (#1186)

documentation/Tools.md

@@ -190,14 +190,15 @@ The instructions depend on the setting, so `read_web_page` words them per reques
 
 ## Outbound Data Restrictions
 
-Once internal content is in a chat, every tool which runs afterwards could carry it out: a web search in its query, `read_web_page` in the address it reads. The chat therefore records where it may still send data, `ChatThread.RequiredOutboundDataRestriction`, an `OutboundDataRequirement` with a level and the source which demands it. It only ever gets stricter, it is saved with the chat, and a later change of a setting does not loosen it, because the content was read under the old one. Four sources set it, and only when they brought content in. The tools do so through `ToolExecutionResult.RequiredOutboundDataRestriction`:
+Once internal content is in a chat, every tool which runs afterwards could carry it out: a web search in its query, `read_web_page` in the address it reads. The chat therefore records where it may still send data, `ChatThread.RequiredOutboundDataRestriction`, an `OutboundDataRequirement` with a level and the source which demands it. It only ever gets stricter, it is saved with the chat, and a later change of a setting does not loosen it, because the content was read under the old one. Five sources set it. The tools do so through `ToolExecutionResult.RequiredOutboundDataRestriction`, and only when they brought content in:
 
 - A mailbox, at its own level, see "Searching Mailboxes" below.
 - A data source, at its own level, once a search found something in it, by `semantic_search` or by the classic RAG process, which sets it on the chat itself, see "Searching Data Sources" below.
 - A search of the Confluence wiki with `search_confluence`.
 - An internal page read with `read_web_page`: one read from a non-public address, or one of the configured wiki, whatever its address. Only the page as it was read in the end counts, after every redirect. A public address which redirects into the intranet restricts the chat; an intranet address which redirects to a public page, such as a sign-in page, does not.
+- The BeyondFacts Lab, for the chat of every step of a preparation, from its start and at `ONLY_LINKS_FROM_CHAT`, see `BflChatTools`: such a chat knows the whole preparation, which may be unpublished, so it never searches the web and reads only the addresses given to it. The lab searches the web in agents of its own, which receive the public details about the event only, see `BflResearchRunner`.
 
-The wiki and the internal pages share one setting, `read_web_page.internalPageOutboundDataRestriction`, which defaults to `ONLY_LINKS_FROM_CHAT`. The search loads a wiki page through the same reader, and the model opens its hits with `read_web_page` right after, so one setting gives the chat one level, and an organization one setting to lock. The tool blocked in the tool selection, and a call which was turned down, name the source: the mailbox, the data source, the wiki, or the host of the page, see `OutboundDataRequirementExtensions.GetToolBlockedMessage`.
+The wiki and the internal pages share one setting, `read_web_page.internalPageOutboundDataRestriction`, which defaults to `ONLY_LINKS_FROM_CHAT`. The search loads a wiki page through the same reader, and the model opens its hits with `read_web_page` right after, so one setting gives the chat one level, and an organization one setting to lock. The tool blocked in the tool selection, and a call which was turned down, name the source: the mailbox, the data source, the wiki, the host of the page, or the BeyondFacts Lab, see `OutboundDataRequirementExtensions.GetToolBlockedMessage`.
 
 What each level allows, see `ToolSelectionRules.IsOutboundDataAllowed`: