Why enterprise AI fails on architecture, not models: layered prompt-injection defense, governed context, and evaluation loops for agentic systems.