Research question
Can reinforcement learning train models to discover prompt injections automatically?
Key findings
- RL-trained attacker models find injections that transfer across agents and defences - Automated attackers outperform handcrafted and optimisation-based baselines
