We broadly do. It's called multiple passes. It's just 2-3x more expensive to run a prompt and then the prompt and response though a secondary fine tuned model

We broadly do. It's called multiple passes. It's just 2-3x more expensive to run a prompt and then the prompt and response though a secondary fine tuned model to detect injection when the cost is so low impact. So no one is doing it.