Can decision models be used as a prompt injection guard?
Up to three models screened 10,336 test emails and repository files, mostly from public prompt-injection datasets on Hugging Face and GitHub. Email results look promising; repository results do not yet. An indication from a lab test, not production evidence.