Most AI security messaging comes down to one promise: the model will refuse malicious instructions. No product can make that promise. A model that reads outside text can be steered by outside text.
Source: [Dev.to](https://dev.to/waqarimtiaz/we-assume-your-ai-agent-will-be-prompt-injected-heres-the-architecture-that-makes-that-survivable-4g0)