Evaluating using Mock Tool Calls to Quarantine Untrusted Prompt Inputs
Tests whether wrapping untrusted inputs in mock tool calls hardens LLM judges against optimized attacks; it mostly fails and sometimes worsens attack success rates.
AI research and discussion on LessWrong. www.lesswrong.com
Tests whether wrapping untrusted inputs in mock tool calls hardens LLM judges against optimized attacks; it mostly fails and sometimes worsens attack success rates.