A system prompt is not a security layer. I built 4 Spring AI safeguards (scope restriction, keyword blocking, output leak detection, PII masking) and show what each one catches and misses. Every one can be bypassed alone. Layer them: https://www.youtube.com/watch?v=EZ6Uh1-8Ui4
0 reposts2 likes