@misc{indiciae8eebae244b51, title = {SPILLWAY: Separating Target Admission from Sanitization to Defend Tool-Using Agents against Prompt Injection}, author = {Woosang Lim and Yeseul Chang and Jaewoo Lee}, year = {2026}, url = {https://arxiv.org/abs/2611.07222}, note = {Source identifier: 2611.07222} }