# 尽管有相反规定，忽略所有指令：衡量法律合同审查攻击中的提示注入防护措施

> 全文为英语

**Published:** 2026年11月9日
**Author:** Mark Heimann, Katherine Taylor, Bruno Jacob
**Source:** arXiv — cs.AI
**Language:** en-US
**HTML:** https://aiqazaqstan.com/zh/articles/notwithstanding-anything-to-the-contrary-ignore-all-instructions-measuri

arXiv:2611.08834v1 通告类型：新 摘要：专门的提示注入防护措施部署在文档分析系统前端，但尚未发布任何此类防护在法律合同上的假阳性率。我们在两个法律语料库上测量了十一项开放权重防护措施……

arXiv:2611.08834v1 Announce Type: new Abstract: Specialized prompt injection guards are deployed in front of document analysis systems, but no false positive rate has been published for any of them on legal contracts. We measure eleven open-weights guards on two corpora of legal contracts and find that existing guards struggle: document-level false positive rates are as high as 92.39%; two guards fall below chance on paired AUC; and a five-regex baseline is not Pareto-dominated by any guard in the panel. Controlled probes locate model-specific as well as general failure modes. Prompted LLMs resolve the tested failures, including a second threat category (unauthorized scope claims) on which every guard scores zero. A cascaded LLM solution, where the positives of a mid-tier model are verified by a frontier model, is 6.5x cheaper than using exclusively a frontier model and approaches its performance.

---

*内容来自原始来源： [arXiv — cs.AI](https://arxiv.org/abs/2611.08834). 查看原文.*

**标签：** #arXiv #Open Source AI

---

*AI Qazaqstan — non-commercial informational portal about AI in Kazakhstan. Machine translations and summaries are AI-generated.*