In case there is an interest for solution to this, check out open.edison.watch and the accompanying blog posts on the README there.
Readit NewsMiyamura80 commented on How the 'Lethal Trifecta' sets the conditions for stealing data on command scworld.com/perspective/h... · Posted by u/forks
True, you have to add guardrails outside the LLM.
Very tricky, though. I’d be curious to hear your response to simonw’s opinion on this.
Sorry not familiar with this. Can you please link me?
Yes that’s the point, you can’t protect against that, so you shouldn’t construct the “lethal trifecta”
You actually can protect against it, by tracking context entering/leaving the LLM, as long as its wrapped in a MCP gateway with trifecta blocker.
We've implemented this in open.edison.watch
Very cool, what is the tok/s on this?