Your prompt injection defenses may not compose
I benchmarked stacked prompt injection defenses across four open-weight models. Two defenses that each work fine alone can block 100% of benign traffic when you chain them.
I benchmarked stacked prompt injection defenses across four open-weight models. Two defenses that each work fine alone can block 100% of benign traffic when you chain them.