OpenAI CISO: mitigation of prompt injection risks in Atlas