Retrieved chunks flow Query → Vector DB → Scan gateway → LLM → Answer. Turn on the attack to inject poisoned chunks carrying prompt-injection payloads. With the scanner up, they get quarantined at the gate. Turn the scanner off and watch one reach the model.