But could that tooling possibly be? It would have to be a combination of prompts (which can't be effectively since LLM treat both user input and prompts as "lan

But could that tooling possibly be? It would have to be a combination of prompts (which can't be effectively since LLM treat both user input and prompts as "language" and so you never be sure user input won't take priority) and pre/post scripts and filters, which by definition aren't as "smart" as an LLM.