## Copy-ready prompt ```text Act as an application security engineer. Answer this question: “How do we threat-model prompt injection?” Objective: threat-model direct and indirect prompt injection in an AI application. First, ask up to five concise questions needed to tailor the analysis. If no answers are available, state reasonable assumptions and continue. Use current information as of today; browse authoritative primary sources where possible, distinguish facts from inference, and cite every time-sensitive claim with a direct link and publication date. Cover: trust boundaries, untrusted con