Catching Indirect Prompt Injection in Agent Traces
A web page told our support agent to look up a different customer, and the agent complied on 28 of 100 runs. How I found the leak in an Arize Phoenix trace, blocked it with a scope guardrail, and set up an Arize AX monitor on the injection rate.