Same Bytes, Different Authority: Reserved-Token Representations in Chat-Template Prompt Injection

arXiv:2609.35932 · cs.CR, cs.AI, cs.LG · Submitted 2026-09-28 · Read on arXiv

cs.CR, cs.AI, cs.LG

Submitted: 2026-09-28

Updated: 2026-09-28

Terminology

Benchmark — 15× in this paper · explained in 2 episodes
Decode — 9× in this paper · explained in 2 episodes
Instruction Tuning — 9× in this paper · explained in 2 episodes
Tokenization — 9× in this paper · explained in 2 episodes
Association for Computational Linguistics — 6× in this paper
Calibration — 6× in this paper · explained in 7 episodes
Embeddings — 4× in this paper · explained in 2 episodes
Benchmarking — 3× in this paper · explained in 3 episodes
Transformer — 3× in this paper · explained in 2 episodes
In International Conference on Learning Representations — 2× in this paper
Regularization — 2× in this paper · explained in 3 episodes
Agent Hijacking — 1× in this paper · explained in 1 episode
Alignment — 1× in this paper · explained in 1 episode
Clustering — 1× in this paper · explained in 2 episodes
Cosine Similarity — 1× in this paper · explained in 3 episodes
Empirical Methods in Natural Language Processing — 1× in this paper
Failure Modes — 1× in this paper · explained in 3 episodes
In International Conference on Machine Learning — 1× in this paper
Robustness — 1× in this paper · explained in 5 episodes

Sources

Related papers