Are You Reading the Right Thing? Rethinking Internal Signals for Prompt-Injection Detection.

arXiv:2610.19452v1 Announce Type: new Abstract: Several recent studies propose detecting prompt injections from a language model's internal state. However, these methods do not measure a single security property. Residual-stream probes, attention scores, role