Maarten Grootendorst

A RAG pipeline injected itself: no attacker, just a book about LLMs in the index

A developer's noise filter and reranker fixed a retrieval bug and exposed a worse one. If ordinary retrieved text can hijack a prompt, injection is a property of your corpus, not your threat model.