3 ms·
> They assume the model can’t reliably separate trusted instructions (system/developer rules) from untrusted ones (user or retrieved data) No current model can
by spacebanana7 1y ago
> They assume the model can’t reliably separate trusted instructions (system/developer rules) from untrusted ones (user or retrieved data)
No current model can reliably do this.