Prompt injection broke every agent system I built so I designed a gateway that separates instructions from data