Defeating Prompt Injections by Design (CaMeL)
paper
Fields
id
sources/sec-arxiv-2503-18813Publisher
Debenedetti et al., Google DeepMind. Extracts control flow and data flow from the TRUSTED query so retrieved data can never influence program flow, and enforces security policy at tool calls via capabilities. 77% of AgentDojo tasks solved with provable security vs 84% undefended - the utility cost is measured, not asserted.
Kind
paper
Published
2025-03-24
Accessed
2026-10-04
Cross-references
This record references no other records.