You can't prompt your way out of prompt injection (Web Pulse, 2026)
Original source: https://mailkite.dev/blog/agent-inbox-security-by-design/