Why prompt injection works: a Transformer-level view | Hacker News Reader