- Simplified GenerateReport prompt to prevent hallucination - Removed example subdomain names that confused the model - Added explicit rules to only use real scan data