medium10 pts · first answer countsllm-safetyprompt-injectionstructured-output

A classifier that can only say five words

A ticket router reads untrusted customer emails, but its output is forced into a JSON enum of five queue names. Why does this help against injection?

A.An attack can at most pick a wrong queueB.Enums make the model immune to all known attacksC.JSON cannot be produced by an attacked modelD.It hides the email from the model

Discussion 0

Join free to post in the discussion.

A classifier that can only say five words

Discussion 0

Related questions