When Prompt Injection Becomes a Regulatory Failure: Liability Surfaces for Foundation Model Deployers

Prompt injection has been a security problem since 2022. As of 2026, it's also a compliance problem. Where the regulatory liability actually attaches, and what deployers should document.