>So is patching this as simple as not allowing the entire space of X for user prompt? >No Isn't the answer yes? >The "obvious" fix for this is to ensure that

>So is patching this as simple as not allowing the entire space of X for user prompt? >No Isn't the answer yes? >The "obvious" fix for this is to ensure that the their instructions are always within their horizon. That's what I take GP to be suggesting. Any possible failure mode that could result from doing this is less serious than allowing top-level instructions to be pushed out, surely?