Guardrails for LLM Apps: Trust Boundaries in Python

This post outlines three types of untrusted input in LLM apps: user input, retrieved content, and model output. It demonstrates direct prompt injection defense by separating instructions from data channels. The SAFE pattern replaces unsafe concatenation with explicit data channel delimiters.