2 ms·
Yes that’s the point, you can’t protect against that, so you shouldn’t construct the “lethal trifecta” https://simonwillison.net/2025/Jun/16/the-lethal-trifect
by fourthark 11mo ago
Yes that’s the point, you can’t protect against that, so you shouldn’t construct the “lethal trifecta”
https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/
- Miyamura80 11mo agoYou actually can protect against it, by tracking context entering/leaving the LLM, as long as its wrapped in a MCP gateway with trifecta blocker. We've implemented this in open.edison.watch
- fourthark 11mo agoTrue, you have to add guardrails outside the LLM. Very tricky, though. I’d be curious to hear your response to simonw’s opinion on this.
- Miyamura80 10mo agoSorry not familiar with this. Can you please link me?