“Anthropic employs a three-layer defense against prompt injection consisting of a well-aligned model, a prompt injection classifier, and an AutoMode classifier.”