Design a defensive test suite for prompt injection and agent reliability. Covers instruction hierarchy, untrusted content, tool permissions, sensitive data, confirmation boundaries, structured outputs and recovery. Produces safe test fixtures, expected behavior and remediation priorities.