RAG systems fail when trusted data becomes hidden instructions. Learn how indirect prompt injection works and how to defend AI pipelines with proper trust boundaries.