[nticompass]

> There is no single control that solves indirect prompt injection

There is, actually. It's called removing the AI agent. Done.

[cryo32]

This is the methodology I use.

No determinism, no separation of data and instructions, centrally controlled.

What couldn’t go wrong?