[key points]

Key points

• •Prompt injection is a persuasion channel, not a security bug, and should be managed as such.
• •Regulations (NIST, UK AI Cyber Security Code of Practice, EU AI Act) require strict control of AI systems, including access management, monitoring, and data governance.
• •AI system security should focus on controlling permissions and capabilities at the system's boundary rather than linguistic rules within the system.