Any data that enters your system from outside a trust boundary should be treated as untrusted until proven otherwise. That includes form fields, API payloads, file uploads, headers, cookies, queue ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...