Designing a multi-level LLM prompt-injection challenge and defenses | Raisolo