"I fixed a retrieval bug from part 1 with a noise filter and reranking, then found something far more interesting hiding underneath it: a real prompt injection, triggered entirely by accident, by a book about LLMs." Quick recap, if you're new here: I'm testing a small open-source pipeline that compares two ways of answering questions about a document: RAG ("Retrieval-Augmented Generation"): the pipeline first searches the document for the most relevant snippets, then feeds only t...