How I Fixed Indirect Prompt Injection in a Refrigerator AI Assistant

A real-world lesson in grounding, trust boundaries, and why “cleaning the prompt” is not enough