What limits the damage when an injection succeeds
What it shows
A parcel locker with an intake slot and a sealed inner compartment; its green approval latch stands for human approval before a risky action.
Its labels
- Outside text enters here, marked as untrusted
- Run tools in a sandbox, the sealed compartment
- New: Require a person to approve high-risk actions
The story
How prompt injection works and how to limit the damage · 10 Oct 2026
An illustration is never a picture of what happened. Drawn on 10 Oct 2026.