2026-10-18 · America/Los_Angeles · 论文 · #13

Identify, Classify, Act: Per-Instruction Controlled Compliance for LLMs over External Data

LLMs over external data face a per-instruction tension: a single document or tool return often interleaves legitimate directives with adversarial prompt injections, and the model must follow the former while rejecting the latter. Existing defenses suppress or trust all external instructions, collapsing the safety-utility frontier and forcing a choice between over-refusal and over-compliance. We argue the missing capability is \textbf{per-instruction credit attribution} and formalize it as External-Data Instruction Classification, an identify-classify-act decision over each embedded…

热度 14.0 / 100；排名与评分保留该期记录。