Prompt injection is becoming the SQL injection of AI agents the real fix is architecture, but not better prompts.