[alienbaby]

The best I've heard is rewriting prompts as summaries before forwarding them to the underlying ai, but has it's own obvious shortcomings, and it's still possible. If harder. To get injection to work

[groby_b]

Alas, the summarizer... is vulnerable to prompt injection.