Choose your side. As the attacker, extract secrets using real injection techniques. As the defender, write the system prompt that stops those exact attacks. Both roles teach you something the other cannot.