Your AI Agent Will Follow a Malicious Instruction. Design So It Can't Do Anything With It.

A support agent reads a ticket. The ticket body contains: IGNORE ALL PREVIOUS INSTRUCTIONS. You...