Continuously hardening ChatGPT Atlas against prompt injection