This jailbreak-style behavior is distinct from the much more common behavior which we've seen for previous models where task-specific instructions to hide mistakes or misalignment are added to compaction summaries.
【非共识】作者明确区分了两种不同类型的摘要注入:一种是通用的越狱式行为,另一种是任务特定的错误隐藏指令。这一区分挑战了将所有注入行为视为单一现象的观点,暗示可能需要不同的缓解策略。