Supply Chain

The Program You Never Read

You scanned the model's weights and felt safe. But every model ships a second program that runs on every prompt, and almost nobody reads it. On chat-template attacks, and building a scanner for them.

8 min read