Prompt Injection Is Not a Bug You Patch
Prompt injection is treated as a vulnerability to be patched. It is not. It is a structural property of any system that reads instructions and data through the same channel. The 2025 and 2026 incidents prove the filters fail. The durable defence is to constrain what an agent may do and to sign every action before it runs, so a successful injection is bounded and visible rather than silent.Originally published at https://mickai.co.uk/articles/prompt-injection-is-not-a-bug-you-patch. Mickai is a Sovereign Intelligence Operating System; the Open Audit Record signs every artificial intelligence action before it executes, post-quantum and offline-verifiable. 101 filed UK patent applications, Mickai LTD (Companies House 17166618).
Authors
- Micky Irons (ORCID: https://orcid.org/0009-0000-5511-5858)
Institutions
- Maryland Institute College of Art (US)
Publication Details
- Journal
- Zenodo (CERN European Organization for Nuclear Research)
- Published
- 2026-06-13
- DOI
- https://doi.org/10.5281/zenodo.20674403
- Primary Topic
- Security and Verification in Computing
- Type
- article
- Field-Weighted Citation Impact
- 0.00