Prompt Injection Is Your SQL Injection

Here's the lesson every team building with LLMs learns the hard way: the trust boundary inside an LLM prompt is not real. Everything in the prompt — your system instructions, your RAG context, the user's message, the output of a tool call — is just t...