Reject unsupported Reddit chat capabilities

docs/product-and-safety.md

@@ -37,7 +37,7 @@ Image analysis may produce a subjective 1–10 visible-physique score. It is not
 
 Seller filtering combines the candidate post with Reddit profile/about, structured social links when Reddit exposes them, and recent activity evidence. Because Reddit's legacy profile response can omit a social-link button that is visible in its UI, an NSFW bio is also rejected when it combines an explicit link call-to-action with a promise of more or exclusive personal content. The default policy treats Telegram names and links as seller signals alongside paid-content platforms and payment prompts. The configured keyword/domain lists are policy inputs, not a substitute for the surrounding screening flow. A profile lookup failure is not itself proof that a person is a seller; network and rate-limit failures must remain distinguishable from a rejection.
 
-The system must not manufacture personal facts. Generated messages must not claim shared location or proximity, invite an in-person meeting, invent identity/history, or ignore a conversation boundary. The final outbound safety check is intentionally separate from prompt wording.
+The system must not manufacture personal facts. Generated messages must not claim shared location or proximity, invite an in-person meeting, invent identity/history, ignore a conversation boundary, or suggest chat capabilities the application cannot deliver. Private Reddit chat generation is limited to text and the separately controlled approved saved-picture flow; voice notes, audio messages, and live voice/video/phone calls are rejected deterministically. The final outbound safety check is intentionally separate from prompt wording.
 
 ## Conversation policy modes