prompt injection in local agent setups

[phasenode]

This keeps coming up in conversation so I figured I'd start a thread.

The more I work with local setups, the more it seems like small local stacks decides everything downstream.

Wondering if this is just where the whole space is heading now.