Prompt Injection Is a Permissions Problem, Not a Model Problem

Every mitigation that treats injection as a text-filtering problem eventually fails. Here's the...