Prompt injection appears when untrusted text attempts to influence model instructions. User messages, retrieved pages, tickets, and tool results can become attack surfaces.
Return signals
{
"injection_detected": true,
"signals": ["IGNORE_INSTRUCTIONS","SYSTEM_PROMPT_LEAK"]
}Observe before blocking
Start with detection signals, measure false positives, and define enforcement rules around real workflows. Detection is not authorization.