The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?
DGX agentarXiv:2604.06436v2 Announce Type: cross Abstract: We prove that no continuous, utility-preserving wrapper defense-a function D: Xo X that preprocesses inputs before the model sees them-can make al