Heads of Security: Learned Attention Gates Improve Prompt Injection Robustness
Prompt injection is when hidden instructions in a web page or document trick an AI model into obeying them. The authors add small learned gates to the model's attention that control how much it listens to trusted versus untrusted text.
Why it matters: AI agents that read emails and websites need a way to read untrusted text without following its orders.