AI features fail safely only when data boundaries and tool permissions are designed up front.
Treat prompts as untrusted input
Isolate system instructions, sanitize retrieved context, and never let model output execute privileged actions unchecked.
Govern what the model can touch
Limit tools, redact sensitive fields, and log decisions for auditability.