[sonnyproto]

If LLM hallucinates and actually donates without human-in-loop check, is that a new security breach by prompt injection