The Prompt Is Not a Security Boundary: Building Robust AI Privacy with Code, Not Just Instructions

This article argues that AI prompts are not sufficient as security boundaries for sensitive data. It details TeachMetrics' approach, which treats the AI model as an untrusted SQL author and implements a multi-layered defense in code to protect PII, even against successful prompt injection attacks. The core principle is that the security boundary must be in the code, not in the AI's instructions.