For what little I know about machine learning this is "hard". there's just one network to give the tokens to.

I mean, how could you provide any kind of guarantees if you had a truly human mind as the consumer? I guess you'd have to model trust / confidence in each source it consumes. whoa that sounds challenging.

That's not how LLMs work. Defending against prompt injections is a very active area of research.