@mttaggart Keeping data and code separate, that is good secure design. The thing with an LLM is that there is no code. It's all data. You give it data, and it gives you back more data. You give it code? It turns out into data and give you more data. You can't turn it back into code. I don't think you can fix that.