[yencabulator]

Those talk about a mechanism to detect prompt injection. If that had been true, we should have seen the chatbot refuse, not lie.