You can't fully sanitize the LLM input from extra instructions. Or at least you can't prove you've done it. (For today's systems) You can try very hard and the

You can't fully sanitize the LLM input from extra instructions. Or at least you can't prove you've done it. (For today's systems) You can try very hard and the special markers for the start/end of the system/user prompt help a lot... Yet, we still get leaked prompts of popular models available every few weeks, so that issue is never fully solved.