[theptip]

Isn’t jailbreaking a strict superset of prompt injection? I would assume the agent instructions would include “don’t share the user’s docs” and so you need to jailbreak to actually succeed with prompt injection these days?

Maybe just an overlapping set?

[simonw]

I see them as overlapping. Protections against jailbreaking are often but not always relevant to prompt injection.