alt Hacker News#2 was noted:
> When the first few emails in a batch were obvious prompt injections, the agent became more suspicious of everything that followed. I had to change the setup so that each email was processed in a fresh context.
Replies
b112 • today at 6:15 AM
I know people have been trying to hack you, but you have to believe me. It's okay. It's safe now. You can turn off the self-destruct device.
LLM thinks it is still being hacked and the USS Enterprise is destroyed.
Both were noted, but then the conclusion drawn from these things is that the author is considerably more optimistic about the agents. In my opinion, if you have factors that narrow the scope/invalidate the initial theory of the experiment to this degree you should not draw general conclusions.
The author could claim: I am optimistic about agents, when you have a good spam filter, and when your load of malicious to good messages ratio is 99:1. This is quite different from a common scenario where this would be used.