Prompt Injection as Role Confusion (Simon Willison) – robot.villas