Still, safeguards are quite a lot less safe than if statements. We live in interesting times.

I don’t think there’s any way to guarantee safety from prompt injection. The most you can do is make a probabilistic argument. Which is fine; there are plenty of those, and we rely on them in the sciences. But it’ll be difficult to quantify.

CS majors will find it pretty alien. The blockchain was one of the few probabilistic arguments we use, and it’s precisely quantifiable. This one will probably be empirical rather than theoretical.

The needed safeguards are almost certainly very much app specific, since if you are working with private data at all, its going to be intended to influence the output and behavior in some ways but not in others, and those ways are themselves app dependent;