> provide a prompt to a system that you don't understand, which may or may not follow it accurately Isn't this also the case whenever you employ a human being

> provide a prompt to a system that you don't understand, which may or may not follow it accurately Isn't this also the case whenever you employ a human being to do anything? These attacks are not unlike "social engineering", I guess the AI is just particularly naïve. Maybe the solution is to have a second AI inspect the behavior of the first one to double check it was not fooled.