Deep Dive: There is no patch for reading: prompt injection, properly taught

A teaching episode on prompt injection: why it is an architectural property rather than a bug, traced from Willison's 2022 coinage and the 2023 indirect-injection paper through the three families of defense, and why adaptive-attack results collapse the headline numbers. Lands on the trifecta and Rule of Two as the only controls that actually bind.