Prompt Injection Isn't a Bug. That's the Whole Problem.
Prompt injection keeps getting filed as a vulnerability that someone, somewhere, will eventually patch. It won't be. Here is what we have learned testing LLM features in production systems, and what we ask clients to do about it.