Pattern

Prompt-injection classifiers and agent firewalls

Run a small, fast classifier on user input and on untrusted content (web pages, emails, tool results) before the agent acts on it, to flag text that tries to override the agent's instructions, as a layer distinct from the harm classifiers that judge whether content is unsafe.

Classification Input-side detectors for prompt injection and jailbreaks, separate from harm classifiers.