0.5B model detects prompt injection in local RAG pipelines
Authors report 0.994 in-distribution recall at a 0.026 false-positive rate, but near-zero recall on PoisonedRAG.
2 stories, newest first · one card per story
Authors report 0.994 in-distribution recall at a 0.026 false-positive rate, but near-zero recall on PoisonedRAG.
Across four Natural Questions seeds, injections reached top-5 in 94.1% of targeted rows; e5 filtering cut exposure-conditional ASR to 0.167.
Today 1.5K readers · 2.4K views · 768 reads · all time 189K views