Assume instruction overrides can succeed, use heuristic signals only for review, and contain payment impact with deterministic policy outside the model.
Contain prompt injection at the payment boundary
calendar_today
September 23, 2026
domain
mandateshield-com