Identify, Classify, Act: Per-Instruction Controlled Compliance for LLMs over External Data

Zesheng Shi, Xue Li, Chenrui Dai +1

LLMs over external data face a per-instruction tension: a single document or tool return often interleaves legitimate directives with adversarial prompt injections, and the model m…