prompt injection in AI workflows: mail, tickets, PDFs
When a model reads inbound mail, a support ticket, or a PDF, a sentence in that material can be treated as an order. Keep the real job in instructions that text cannot change, and have a person approve any send, payment, or record change.