Comment by veganmosfet

> prompt injection appears to be largely solved already.

I trust Anthropic's research, and Opus-5 is definitely the most robust model against prompt injection. However, in my experiments - only one specific scenario - this was still possible [1][2].

[1] https://itmeetsot.eu/posts/2026-07-27-opus5/

[2] https://itmeetsot.eu/posts/2026-08-12-opus5_automode/