With this said, it's like we need some way for the LLM to identify in band attacks and point them out to somebody (not the attacker either).