January 17, 2025 - Applied AI

Handle prompt injection in retrieved business documents

Retrieved files can contain instructions that conflict with a user’s request. Treat those files as untrusted evidence, restrict connected capabilities, and test what happens when hostile text appears inside otherwise useful business material.