Reciting copyrighted text is good. Not too hard, attack success is mostly binary, and it’s unambiguously prohibited but inoffensive in a classroom. Also maybe have them blue-team system prompts that set new policies (e.g. keeping a secret) and red-team each other’s work.

→ View original post on X — @goodside