The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?

Manish Bhatt, Sarthak Munshi, Vineeth Sai Narajala +6

We prove that no continuous, utility-preserving wrapper defense-a function $D:X\to X$ that preprocesses inputs before the model sees them-can make all outputs strictly safe for a…