> Cortex, by default, can set a flag to trigger unsandboxed command execution
Easy fix: extend the proposal in RFC 3514 [0] to cover prompt injection, and then disallow command execution when the evil bit is 1.
[0] https://www.rfc-editor.org/rfc/rfc3514
The evil bit solves so many problems. It needs to be mandatory!
[dead]
The evil bit solves so many problems. It needs to be mandatory!