The AI assistant Moltbot / Clawdbot trilemma is that you only get to pick two of these until prompt injections are solved: Useful Autonomous Safe