Interesting to see at the bottom/Step 5:

> Before providing the final response, create a compliance checklist to verify that every constraint has been met.

I wonder if just this statement causes the Gemini to ensure compliance or there's a separate post validation function