I was the first to publicly demonstrate prompt injection, which @simonw then named. However this was later than Preamble’s classified disclosure of it to OpenAI as well as @himbodhisattva briefly speculating PI might exist (and proposing its current name), both in May 2022.