rec 0e18886 records
- session
- badge
- notify
- file
- notify
- intake
4 min read
Prompt injection is an input problem at the boundary, not a model problem
The same poisoned document, two runs. Without a door, the instruction travels from agent to agent. With one, it is stripped on the way in and the redaction is written down.