Prompt injection, system prompt leaks, data exposure and off-policy actions. A one-week red-team plan for any chatbot, and the fixes that hold.
