Restrict AI Agent Tool Invocation on Untrusted Data

AML.M0030 · runtime_guardrails

Citation-grounder refuses on empty retrieval; prompt-injection detection at tool boundary.

Addresses techniques (2)

• LLM Prompt Injection AML.T0051
• Indirect Prompt Injection AML.T0051.001