this is a lethal trifecta, but where a chunk isn't even needed you have a secret to keep that is read by the llm, and untrusted input that wants to exfiltrate

this is a lethal trifecta, but where a chunk isn't even needed you have a secret to keep that is read by the llm, and untrusted input that wants to exfiltrate it. by hell or high water, the agent is gonna output that text