<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Semantic Overlays: Mitigating Prompt Injection with Annotations Beyond Tokens and Steering Vectors · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/2608.23873/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Mon, 02 Nov 2026 11:27:26 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/2608.23873/feed.xml" rel="self" type="application/rss+xml" /><item><title>Semantic Overlays: Mitigating Prompt Injection with Annotations Beyond Tokens and Steering Vectors — HN submission</title><link>https://news.ycombinator.com/item?id=49525220</link><guid isPermaLink="false">urn:hackerpapers:submission:2608.23873:49525220</guid><pubDate>Tue, 01 Sep 2026 17:40:13 GMT</pubDate><description>&lt;p&gt;Show HN: Semantic Overlays – an NX bit for LLM prompt injection (live demo)&lt;/p&gt;&lt;p&gt;I&amp;#x27;ve built a new method for steering LLMs called Semantic Overlays, small trained adapters on a frozen model which change how it perceives a piece of its context. The most readily applicable usage is to mitigate prompt injection, and it lets us take a very-injectable Qwen-3.5-9B to SOTA scores on all the prompt injection benchmarks I could find. (They are only blackbox attacks, but I did NOT train on anything like them — whitebox attacks are out of scope for this paper) I&amp;#x27;m excited for you to play with the tech — see if YOU can break it! (let me know if you can) Paper at…&lt;/p&gt;&lt;p&gt;6 points; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2608.23873/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.AI</category></item></channel></rss>
