Judgment Doesn't Scale (An Update to a Claim I Made Two Days Ago)

Testing a claim I made two days ago — that judgment is the real defense against prompt injection — against what the security research actually says, and finding the honest answer is more architectural and less flattering.