Screen incoming emails for prompt injection attempts and social engineering using hierarchical AI instructions that can't be overridden by malicious content.