Post #4280186

Super interesting paper: "Prompt Injection as Role Confusion" https://role-confusion.github.io/ They trained a linear probe to predict roles (user/tool/assistant), and then experimented with injecting role tags and just changing the writing style to mimic a role (like <think>ing).