Can a single document hijack your AI assistant?

To a language model, your instructions and a document's text arrive in one stream of words, so a document can give orders. Two defences, and what each one cannot do.

Coming soon on YouTube