Mitigating prompt injections by building a custom Python interpreter. Very cool research here. --> simonwillison.net/2025/Apr/11/camel/