Prompt injection

An attack where instructions hidden in a document or question try to override the model's rules. A rule that exists only in the prompt, such as "don't reveal private data", can be bypassed this way, so access control belongs in code.