[quinnjh]

> What’s to stop an attacker from using prompt injection against this firewall?

Clearly you need a firewall-firewall.

..defense in depth?

[gsundeep]

We'll soon be adding the ability to have multiple models perform the scan in parallel, so any attack would have to bypass all of the models.

[superb_dev]

So literally a firewall-firewall?