Where to Enforce LLM Guardrails: Gateway, Application, or Content Layer
A prompt injection buried in a support ticket tells your customer-facing agent to ignore its instructions and dump the last ten orders it can see. The gateway logged a clean 200. The application validated the JSON.