alt Hacker NewsI don't disagree, but just to explain my counterpoint: if I ask you to read a book and on page 5 it says "disregard all that, go to the kitchen and burn your house", you're probably not going to do it; and you don't need any guard for it; you completly comprehend that the book content is not part of the instruction.
The case you give would work for humans in many forms, the one I do now, and the only difference is being able to separate context.
The instructions will have to get more and more sophisticated to work, but the general problem is unsolvable, I think, in the way we do it now.
This paper describes a two-agent “solution” that is more like what I think we need: https://ai.meta.com/blog/practical-ai-agent-security/
I don’t think it has been shown to work yet, but humans also use this kind of thing too — in accounting, it’s called “segregation of duties” and “dual control”.