Which best captures the key idea of "Defending against injection"?

AGive data in a clean structure (tables, JSON) so the model parses it reliably BCompare planned vs actual weekly; surface slips early CSeveral specialised agents collaborate, each owning a role DSeparate instructions from data, and tell the model to treat data as untrusted