Comment by M_Carpenter

it's a frontend today. The git hook version is the right next step. Prompt injection catch was legitimate, though the model's response was arguably correct.