Hacker News Reader

> There is no single control that solves indirect prompt injection

There is, actually. It's called removing the AI agent. Done.

This is the methodology I use.

No determinism, no separation of data and instructions, centrally controlled.

What couldn’t go wrong?