You can get rid of 99.9% of those attacks by simply dispatching the data consumption to a different instance of the LLM, see, for instance, some of the later patterns in https://arxiv.org/abs/2506.08837

Thanks for the article link! Do you happen to know where to follow/read more articles like this for someone interested in getting more into AI security? Ty