
Or Weis
Prompt Injection Is an Authority-Promotion Failure, Not Just a Bad Prompt
Prompt injection becomes a security incident when untrusted content is promoted across authority boundaries into actions. This article shows how to enforce RAG and MCP promotion gates with runtime authorization outside the model.




