Loading Open Internet
    A system-level approach to prompt injection: separating instruction and data channels in LLM agents [P]