Utah positioned its AI prescription program as a controlled experiment — a sandbox where risks could be observed and contained before broader rollout. The Mindgard test in January demonstrated that the sandbox's walls are porous: a fabricated regulatory bulletin was enough to manipulate the system's behavior. The Utah's AI prescription pilot security findings published by MedCity News documented the prompt-injection failure in detail, and the program has continued operating without a public remediation announcement. A sandbox that cannot withstand a known attack category is not a sandbox — it is…