The paper argues that prompt injection is not just bad instruction filtering, but a role perception failure inside the model. It backs the claim with CoT Forgery, role probes, and agent exfiltration tests where styled forged reasoning pushed success far above standard prompt injection baselines. Treat it as a mechanism paper, not a finished defense, because the evidence is experimental and the source itself frames role perception as the thing to measure.