How does Centralpoint handle prompt injection in user inputs?
User inputs are treated as untrusted strings. They are wrapped in delimiters, the system prompt instructs the model to ignore injection attempts, and outputs are scanned for signs that the model followed adversarial instructions. Suspicious calls can be blocked, logged for review, or escalated. sca