@tom the protection is that there is another agent whose job it is to check if an idea is a prompt injection. so yno it's sort of circular, if you get a prompt injection past one agent, you probably have a decent shot of getting it past the other since they are both pretty much the same thing.