Heads of Security teaches a model to split attention between trusted and untrusted text at the head level, so injected instructions in a document or tool output can't hijack the real prompt.
Against RL-Hammer, a strong black-box jailbreak, it holds attack success to 10%, versus 85-97% for SecAlign and other current defenses. The catch: it requires retraining, not a wrapper you slap on someone else's API.