How to Give Your AI Agent a Prompt Injection Defense That Actually Works

A prompt injection defense that works assumes the model will lose. You can't reliably stop an LLM from following instructions hidden in an email or a web page.