Prompt Injection at the Tool Boundary: Sanitizing LLM-Driven Function Calls in Go Microservices

How indirect prompt injection propagates through RAG retrieval into tool execution, and the sanitization architecture to stop it.