Designing AI agents to resist prompt injection — Blankdot