CaMeL offers a promising new direction for mitigating prompt injection attackssimonwillison.net5 pointssimonwa year ago