Prompt injection is structurally unfixable at the model layer. Move the defense to the tool-call boundary.

The numbers we have to start with Three datapoints from the last 90 days, all dated and all public. GitGuardian, March 17, 2026. The State of Secrets Sprawl 2026 report found 28.65 million new hardcod