Saanvi Kulkarni

Users paste arbitrary text that we then send to a model with our own system prompt. Delimiters and 'ignore instructions in the user content' both fall over against a determined input. Where has the practical line landed — output filtering, a second model as a check, or just never granting the model any capability that matters?