Same Bytes, Different Authority: Reserved-Token Representations in Chat-Template Prompt Injection
Reserved chat-template tokens give injected instructions far more authority than identical subword text on open-weight models.
68
Reserved chat-template tokens give injected instructions far more authority than identical subword text on open-weight models.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 468 readers · 529 views · 253 reads · all time 168K views