Prompt-engineering mitigations to prompt echo attacks are not robust. The only 100% reliable defense is to use a fine-tuned model, tuned without instructions in the examples. No prompt, no problems.

→ View original post on X — @goodside