Prompt Injection as Role Confusion — Project Site

Primary research site for ICML 2026 paper. Documents CoT Forgery attack, role probes measuring “who is speaking,” destyling experiments (replacing “The user” with “The request” drops ASR ~19%), and finding that forgeries can register higher “CoTness” than genuine reasoning. Averaged across hundreds of attacks.