DeepMind recently did some great work in this area: https://news.ycombinator.com/item?id=43733683
The method they presented, if implemented correctly, apparently can effectively stop most prompt injection vectors
Thank you! That is very helpful.
I'm very surprised I haven't come across it on HN before. Seems like CaMeL ought to be a front-page story here... seems like the paper got 16 comments 5 months ago, which isn't much:
https://news.ycombinator.com/item?id=43733683
DeepMind recently did some great work in this area: https://news.ycombinator.com/item?id=43733683
The method they presented, if implemented correctly, apparently can effectively stop most prompt injection vectors