[troglodytetrain]

At best this is a small piece IMO, but this does look like a piece of it, well done. At least based on my own experience exposing sys prompts from niche llm models in my saas niche. Should be higher upvoted. For those asking for proof, unfortunately it simply isn’t possible short of anthropic employee disclosure. All I know is that this is exactly how LLMs tend to leak: provide info they didn’t realize was sys prompt related and thus leak what they aren’t supposed to leak within their own current context window.