The Cognitive Airlock: Architecting Defense-in-Depth Against Indirect Prompt Injection in RAG Pipelines