Excelrs/Blog

security

Prompt injection: the file is not allowed to give orders

Untrusted text is data. How a planted line steals the job, and how your code keeps the rules.

Sandeep Jaiswal · 18 August 2025 · 5 min read

System vs user: two slots, not one blob

Rules stay in system. Files stay in user. An ignore-rules line must still refuse.

Sandeep Jaiswal · 21 April 2025 · 5 min read