prompt injection containment as a structural property instead of a detector (interactive, real code, no llm)

Could not extract a complete article body from this publisher.

Open the publisher link from the Source section below for the full article.