RightSignal
1 of 6

Your RightSignal

AI safety

Heads of Security: Learned Attention Gates Improve Prompt Injection Robustness

Igor Shilov, Xiaoxue Yang, Alexander Panfilov, Evgenii Kortukov, Matthieu Meeus, Peter Romov · Submitted 27 Oct 2026
Preprint · not peer reviewed

Prompt injection is when hidden instructions in a web page or document trick an AI model into obeying them. The authors add small learned gates to the model's attention that control how much it listens to trusted versus untrusted text.

Key finding: One strong attack succeeded 97% of the time against GPT-OSS-20B but only 10% against the defended model, which kept its normal skills.

Why it matters: AI agents that read emails and websites need a way to read untrusted text without following its orders.