Designing Agents to Resist Prompt Injection

OpenAI outlined how prompt injection attacks against agents increasingly resembled social engineering, and argued that defenses should focus not just on detecting malicious inputs but on limiting the impact of successful manipulation.