Prompt injection

An attack where untrusted content instructs a model to ignore its rules. No perfect defense exists today; layered filtering plus least-privilege design limits the blast radius.