The Cognitive Firewall: PII Scrubbing Is Not a Feature. It's Part of the Runtime.
PII scrubbing is not a safety feature you bolt on later. If an LLM can see private data and untrusted instructions in the same token stream, your runtime boundary is already broken.