Are You Reading the Right Thing? Rethinking Internal Signals for Prompt-Injection Detection

Sarthak Gupta, Priyanka Tembey

Several recent studies propose detecting prompt injections from a language model's internal state. However, these methods do not measure a single security property. Residual-stream…