I don’t fully understand the prompt injection issue. In the bank example, the AI was previously told that a $1m credit was appropriate. There’s no context for whether the issue was or wasn’t the bank’s fault, so I assume the AI was given the answer that it WAS the bank’s fault, and then it responded appropriately.
Is the issue that the customer convinced the AI that the bank was at fault through prompt injection?
Is the issue that the customer convinced the AI that the bank was at fault through prompt injection?