A RAG pipeline injected itself: no attacker, just a book about LLMs in the index
A developer's noise filter and reranker fixed a retrieval bug and exposed a worse one. If ordinary retrieved text can hijack a prompt, injection is a property of your corpus, not your threat model.
Reality
- Evidence42
- Adoption10
- Hype gap+18
- Incentives28
- Confidence52