Picture a straightforward architecture. A candidate answers interview questions. A model extracts features from each answer and updates a running assessment. Between questions, the candidate can ask about the role, the team structure, the benefits, and what happens next. It makes the experience humane. So you route those questions to the same conversational model that is running the interview, because it already has all the context. One model, one context window, one pipeline. Ship it.Now trace what you just built. The scoring logic and the Q&A logic share state. They share a context window. They may share a prompt. The features that drive the candidate's score are computed in the same place that generates friendly answers about parental leave. There is no wall between "this text is evidence about the candidate" and "this text is a customer-service reply." You did not design a leak. You designed a system with no reason not to leak.