Everything the model reads is untrusted
A system that retrieves documents and calls tools has a security property most engineers meet for the first time here: instructions can arrive inside data. This lesson covers why prompt fixes are insufficient and where the defence actually goes.
a free account unlocks the core curriculum tier · no card