Comment by tomveber

Prompt injection is the only one of your three I'd call routine already. Has anyone here actually seen the optimization-loop case outside a benchmark or a red-team setup?