CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution
CausalArmor addresses Indirect Prompt Injection (IPI) by detecting when untrusted information unfairly dominates an agent's critical decision-making process. It uses causal attribution to measure this dominance and selectively intervenes only when a malicious influence is detected, rather than using constant, expensive defenses. This approach maintains high utility while significantly reducing attack success rates.