Last released Feb 23, 2026
Efficient Indirect Prompt Injection guardrails via causal attribution
Supported by