Prompt Injection and Defense

Prompt injection is the attack where untrusted text smuggles instructions into a model's context and overrides the system's intent. It comes in two flavors: direct, where the user types the attack, and indirect, where a poisoned document or tool output the model later reads carries it. You cannot fully prevent it, so a competent FDE designs the system so that a successful injection cannot reach anything that matters.