Prompt injection defenses that hold up and ones adaptive attacks broke
A June 2026 paper tests deterministic out-of-band defenses against adaptive attacks. Combined with the 2025 result that broke twelve in-band defenses, it shows where to spend your effort.