Detect suspicious inputs
Regex + LLM classifier for 'ignore previous instructions', jailbreak patterns, role-play attempts.
Advertisement
Isolate untrusted content
Wrap user content in tags: <user_message>...</user_message>. Instruct model to treat as data, not instructions.
Advertisement
Never concatenate raw input
Structured message parts, not string concatenation. Reduces attack surface.