Zofia Kowalska

September 2026

1. Answered How do you keep generated code from silently ignoring an edge case?

   Sep 21, 2026

   Assume injection succeeds and design so that it does not matter. Do not give the model a capability whose misuse you cannot tolerate — no unbounded tool calls, no raw SQL, no sending mail on its own authority. Everything else is defence in depth: mark untrusted content clearly, never let retrieved content look like instructions, validate outputs against a schema, and require a human confirm anything that writes. Delimiters alone stop the lazy attempt and nothing more.