Prompt Injection as Role Confusion
The paper reframes prompt injection as role confusion, offering a clearer technical model for defending instruction-following systems.
Excerpt
HN · 234 points · 116 comments
Read at source: https://role-confusion.github.io