RAG pipelines leak PII through prompt injection. A substitution layer swaps real data for realistic fakes before it reaches the LLM, neutralising the attack.

Elixir and OTP offer actors as agents, supervision trees for failure recovery, and process mailboxes as thought logs — a natural runtime for living software.