LLM prompt injection playbook · the 2026 attack surface

Every category of prompt injection we've seen in production: direct, indirect, RAG-poisoning, tool-abuse, and the CI-level eval harness we run to catch them before release.