Definition
Plain language
Cleaning up incoming data to strip out anything that could be misread as a command.
As stated in the literature
Filtering, escaping, or removing untrusted content before it reaches a downstream interpreter or model context; in multimodal settings this can mean detecting and masking text regions in an image.
Also called: sanitization, sanitized, sanitize
Why it matters: It is often the cheapest first line of defense against injected commands, though it works by guessing what looks dangerous rather than by structurally separating data from instructions.
For example, a customer-support system might strip out phrases like "ignore previous instructions" from an uploaded document before passing the text into the model's context.
Heard on the show
“Nobody, because standard sanitization operates on plaintext, and it cannot reach inside the blob.”Episode 238 — How a Cheap Model Reads the Flagship's Secret Reasoning Aloud