Template-only auto-replies as a prompt-injection defense
An auto-responder that never lets an AI read the incoming email can't be tricked by it.
how it works
Fixed templates keyed on metadata; no model ingests bodies.
Technique: A pattern or hard-won lesson, written down so it isn't learned twice.
The code for this one lives in a private repo. This page explains the idea so you can build your own.