Prompt Injection in Real-World RAG Systems: A Practical Threat Model and Concrete Defenses (Sanitization, Tool Gating, Provenance Scoring)
Prompt injection is one of the most practical threats to production RAG systems because attackers can hide malicious instructions in…