Loading page…
With the task-only system message and objective A, defenses had little effect on naive and lookalike injections; nameless tokenization reduced forged-turn success from 99.9% to 92.8% and forged-tool success from 33.1% to 7.4%, but increased forged-system success from 46.9% to 68.0%. · CiteArk