Prompt Injection: Defenses

Defense in depth, applied — limiting input surface, tagged inputs, capability restriction, scoped credentials, human-in-the-loop gates, output validation, content provenance, sandboxing, monitoring, incident response. No silver bullets, layered defenses, sized to consequence.