Distinguishing system-authorized instruction sources from instruction-like text mixed into external data streams typically requires combining provenance tracking with semantic classification models.