I quite like that they're using GPT3.5 here – for prompt injection a defense that works with the less expensive, faster models would almost certainly work with the more expensive ones too I imagine GPT-3.5 is better for fine tuning at the moment because there's more experience

→ View original post on X — @simonw,