1 paper
Qisong He, Jinwei Hu, Xinmiao Huang +3
In a long conversation, an LLM may produce a fluent continuation that rests on premises the conversation has already abandoned. Context-manipulation attacks exploit precisely this…