The 2-Line Defense That Stops 90% of Real-World Prompt Injection

A system-prompt clause and an output check stop most attacks (industry rule-of-thumb, not a benchmark). The five patterns they don't stop, so you know the limits.