M26.8 CONNECT THE MECHANISM
Keep retrieved evidence current, permitted, and resistant to manipulation
A customer asks for discount codes and gets the staff code. Another gets last month's return window from a cache. A forum post tries to take over. Find and fix all three.
LESSON OVERVIEW11 min lesson
Lesson overview
A customer asks for discount codes and gets the staff code. Another gets last month's return window from a cache. A forum post tries to take over. Find and fix all three.
What you’ll explore
- Retrieval systems must propagate access and version rules through indexing, ranking, caching, and generation; poisoning and prompt injection require separate controls and diagnostic tests.
GO TO THE SOURCE
Original explanations, connected to the research.
Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection (Greshake et al., 2023)NIST AI Risk Management FrameworkRetrieval-Augmented Generation for Knowledge-Intensive NLP Tasks (Lewis et al., 2020)Suggest a correction
A precise note can make an explanation better.
Choose the scene and describe what needs attention. Download a feedback file to share through a channel you already use. This page does not send feedback or connect you with a reviewer.