I feel like since they developed read-only "role probes", it should be possible for harnesses developers to make a "role api" where you can force it to treat user input as user input, regardless of the content by tweaking the model's activations in real time.
The fact that this isn't being done tells me how much labs's priorities are still set by marketing, and how investing in security is fundamentally against their marketing incentives.
I feel like since they developed read-only "role probes", it should be possible for harnesses developers to make a "role api" where you can force it to treat user input as user input, regardless of the content by tweaking the model's activations in real time.
The fact that this isn't being done tells me how much labs's priorities are still set by marketing, and how investing in security is fundamentally against their marketing incentives.