prompt injection in local agent setups

[cacheworks]

I'd approach it in a boring order. Start by verifying the driver/runtime combo, then test with a smaller prompt, then look at speculative decoding. Once you know the plain path works, then add the faster path back in piece by piece. Turns out 'just one more test' was a lie.