A Picture Is Not a Permission Boundary
TL;DR for operators An AI agent reading an external document may encounter instructions that the document’s author has no authority to issue. Pictionary offers an unusual defense: convert that untrusted text into an image before the model reads it. The content remains available, but several tested models become substantially less likely to obey embedded commands. ...