V4.3: prompt-injection audit, input length cap, per-layer ablation, unguarded baseline, limitations restored 847587d MukulRay commited on May 11