CaMeL offers a promising new direction for mitigating prompt injection attacks
simonwillison.net/2025/Apr/11/camel
What Jamie wrote
Many packages that add GenAI capabilities suddenly find themselves subject to prompt injection attacks.
It works by taking a command from a user, converting that into a sequence of steps in a Python-like programming language, then checking the inputs and outputs of each step to make absolutely sure the data involved is only being passed on to the right places.
Interesting approach, breaking down and building up again.