the model treated a comment in my data as an instruction and I felt it in my soul

a user put a fake instruction inside a field, the model obeyed it. everything the model reads is potentially adversarial, including your own database. design for that.