I believe secure-by-design bots are the only way forward. Configure the DB/API with all the necessary ACLs so that even if the user were to craft a malicious q

I believe secure-by-design bots are the only way forward. Configure the DB/API with all the necessary ACLs so that even if the user were to craft a malicious query (which can't probably be prevented in AI-world) it can't do anything really bad. If the executing user context has only read access to data of the current user that should be allowed for that user, no injection attack should be able to do anything malicious even if the prompter was to successfully craft something like "select privatekey from otheruser". Relying on preventing such injection queries seem impossible and unreliable to me. Sure, it doesn't prevent leaking any GPT-3 query itself and such, only injection though.