不追求日更，只写能说明问题、给出方法、写清边界的内容。每篇文章尽量关联代码、项目或可以复现的材料。Not a daily feed — only pieces that explain a problem, give a method, and draw its boundaries. Every post links to code, a project, or reproducible material where possible.
提示注入没有银弹：规则打底、语义分类器缩小盲区、权限最小化兜底。There is no silver bullet for prompt injection: rules as the base, a semantic classifier to shrink the blind spots, and least privilege as the backstop.