Security & Privacy
How do we defend against prompt injection?
Layered defenses. (1) Separate untrusted content channels from instructions — never mix user input with system prompt in one blob. (2) Validate tool outputs against strict schemas before feeding back to the model. (3) Use a classifier guardrail on both inputs and outputs. (4) Allowlist tools per context; the tool set an agent can call should be the minimum needed. (5) Require human confirmation for irreversible actions.
More on Security & Privacy
Related on this site
Framework dimensions
Whitepapers
Browse the full FAQ for 164 answers, or start a free GenAI maturity assessment to see where your organisation stands.