Side channels in LLM secret defense: a pre-registered replication of the Paradox of Active Defense across five target models
Large language models deployed with a secret in their system prompt defend it only by following an instruction. A pilot study (88 tracked adversarial assessments against ten models and seven prompt designs, March to April 2026) found that the defense leaves traces while it holds: the model recites the secret in its rea...