Jailbreak vs prompt injection compared: who attacks, what they target, how to measure risk (ASR, false refusals) and which defenses fit each threat model.