What is prompt injection, and why can't prompts stop it?
Imagine your AI assistant reads your email and can send replies for you. An email arrives from someone you don't know, with a line telling the assistant to forward your recent messages to an outside address. Which instruction does it follow, yours or the stranger's?
In this video I explain what prompt injection is, and why stricter instructions, grounding, delimiters or a second AI checking the input can't be relied on as the boundary. Then, using that one inbox assistant, I show where the boundary goes instead: limits on what the agent's tools can reach, enforced in code. I end with two…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.