[codechicago277]

I wonder if this could be used for prompt injection, if you copy and paste the seemingly empty string into an LLM does it understand? Maybe the affect Unicode characters aren’t tokenized.

[ancillary]

There's at least one paper (though pretty recent) about it: https://arxiv.org/html/2603.00164v1

[jibal]

Yes, and that happens.