RAG 2 Cosine Similarity Is Not a Safety Property Sep 8, 2026 The Injection That Passes Every Filter Sep 1, 2026