Mitigating Prompt Injection with Finite Automata over Agent Trajectories · HackerTrans