1 post
Prompt injection is role confusion: systems that derive content authority from channel trust execute attacker input as instruction.