{"schemaVersion":1,"target":{"type":"reading","id":"0afe29b2eed7eaec73171234e7478e9b6fc07d7500cc6609bc150da34515d097","revision":"01262f99-84c1-47a0-88f6-333b3edf5055","revisionKind":"publication-id","title":"arXiv cs.AI: Lim and coauthors propose SPILLWAY to limit prompt injection in tool-using agents","url":"https://escapemeridian.com/readings/arxiv-cs-ai-lim-and-coauthors-propose-spillway-to-limit-prompt-0afe29b2"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.07222","revision":"e1b62bbcb538492119f5c4ecc04ebea2809daa931d8c3108594e61b500c3eac2","revisionKind":"sha256-source-text","title":"SPILLWAY: Separating Target Admission from Sanitization to Defend Tool-Using Agents against Prompt Injection","url":"https://arxiv.org/abs/2611.07222"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."}