Generative AI systems are fallible: in March 2025, a ChatGPT vulnerability was widely exploited to trap its users; a few months earlier, Microsoft's health chatbot exposed sensitive data; in December, a simple prompt injection allowed the takeover of a user…