Capture Notes

Paper on document-authored control-signal impersonation as a low-cost indirect prompt attack against RAG boundaries.

AI security relevance:

• Directly relevant to RAG trust boundaries and untrusted document handling.
• Strong candidate for evidence notes on source/data/instruction separation.