@chockenberry recursive pollution is real #MLsec
https://berryvilleiml.com/2024/01/29/two-interesting-reads-on-llm-security/