CaMeL agent to protect against indirect prompt injection

CaMel paper was posted several months ago. Has anyone experimented with it in concrete examples? Any success stories?