Article5 min read
Prompt injection and source authority: can a model tell who supplied the text?
A preprint labels every input token with its origin and adds a learned attention bias, so suppression follows where text came from.
A new preprint labels each input token with its origin and adds a learned attention bias, reporting near-zero prompt-injection attack success.
Read article