Prompt Injection Defenses That Actually Work in 2026

Prompt-based guardrails do not stop prompt injection. What actually works: architectural defenses, tool-scope enforcement, output escape, detection layers.