For any reasonable definition of "prompt injection", that pretty clearly is one.

Seems pretty easy to me. Any injection attack is an attempt to exploit technical weakness by injecting commands into data streams.

The higher court that handles appeals.

That’s the generic answer to “what is stopping the court from…” in a functional judicial system.

But Brasil court doesn't work under precedents. So unless this becomes law, it doesn't change anything for future cases.

There are probably certain humans who would follow commands as given, perhaps a child or child-like?

Asking an LLM to do this through a prompt injection attack is less an unreasonable request and more an active effort to undermine the court's infrastructure and processes.

I'm not a lawyer; that's my intuition on the matter.