Why it matters

System prompts often contain proprietary logic. Extraction damages competitiveness + security.

Advertisement

The architecture

Layer 1: prompt injection defenses.

Layer 2: output filtering (redact prompt fragments).

Layer 3: architectural separation.

Prompt confidentiality layersInjection defenseprompt designOutput filterredact leaksArchitectureseparate concernsFully preventing prompt leaks is hard; assume some leak + minimize damage
Prompt protection.
Advertisement

How it works end to end

Design: minimize secrets in prompt.

Detection: match output against known prompt fragments.

Business logic outside prompt.