I’m really just curious how they guard against prompt injection. Otherwise this seems awesome.