Also they absolutely want the LLM to read user input and respond to it. Telling it exactly which inputs it shouldn’t respond to is tricky.
In traditional programs this is done by “sanitizing input”, which is done by removing the special characters and very specific keywords that are generally used when computers interpret that input. But in the case of LLMs, removing special characters and reserved words doesn’t do much.
Also they absolutely want the LLM to read user input and respond to it. Telling it exactly which inputs it shouldn’t respond to is tricky.
In traditional programs this is done by “sanitizing input”, which is done by removing the special characters and very specific keywords that are generally used when computers interpret that input. But in the case of LLMs, removing special characters and reserved words doesn’t do much.