Two distinct failures with different causes and different fixes: jailbreaks arrive from the user, prompt injections arrive inside a tool result.