Your AI agent’s system prompt is not a security control

An AI agent told in its system prompt to show a user only what that user is cleared to see will hand over more the moment someone talks it into doing so.