while i cant speak regarding arbitrary prompt injections, ive been using a simple approach i add to any llm harness i use, that seems to solve turn or role confusion being remotely viable.

i really need to test my toolkit (carterkit) augmented harnesses on some of the more respectavle benchmarks