That's exactly how Lakera's gandalf demo works: https://gandalf.lakera.ai/ https://gandalf.lakera.ai/ It's pretty decent in practice, but determined humans can

That's exactly how Lakera's gandalf demo works: https://gandalf.lakera.ai/ https://gandalf.lakera.ai/ It's pretty decent in practice, but determined humans can work around it with some effort.