Prompt injection is a permissions problem

The moment you connect an AI assistant to your filesystem, the threat model changes in a way that...