One of the items near the top of my to solve list for a small startup I’m advising is prompt injection via the various routes that user input and user generated content can find their way into the product.

It’s not right at the top of the list only because the current customer base is made up entirely of a small number of friendly triallists who are known and trusted and not likely to go rogue.

It’s sort of mind blowing that Google would release an AI powered feature to who knows how many millions of people with, apparently, no prompt injection mitigations in place and no interest in adding them.

We think pretty hard about the corners we choose to cut at our early stage, and the trade-offs we’re making in doing so, but I still occasionally worry that we’ve cut a corner we shouldn’t have. It seems I’m somewhat less of a cowboy than I’m sometimes concerned I may be.