Invasive Context Engineering to Control Large Language Models
Not on the map. Why?
Abstract (arXiv)
Current research on operator control of Large Language Models improves model robustness against adversarial attacks and misbehavior by training on preference examples, prompting, and input/output filtering. Despite good results, LLMs remain susceptible to abuse, and jailbreak probability increases with context length. There is a need for robust LLM security guarantees in long-context situations. We propose control sentences inserted into the LLM context as invasive context engineering to partially solve the problem. We suggest this technique can be generalized to the Chain-of-Thought process to prevent scheming. Invasive Context Engineering does not rely on LLM training, avoiding data shortage pitfalls which arise in training models for long context situations.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 25 of its 38 references that are in the map. First posted on arXiv 2 Dec 2025.
Builds on
25 of 38 references.
References · 25
- 2017Attention Is All You Needcited by 60,361
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2024KVQuant: Towards 10 Million Context Length LLM Inference with KV Cache Quantizationcited by 591
- 2025LLMs Get Lost In Multi-Turn Conversationcited by 429
- 2022A Systematic Evaluation of Large Language Models of Codecited by 363
- 2024Frontier Models are Capable of In-context Schemingcited by 287
- 2023Large Language Model Alignment: A Surveycited by 243
- 2023Large Language Models in Finance: A Surveycited by 226
13 more
- 2025Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teamingcited by 181
- 2022Talking About Large Language Modelscited by 175
- 2024LongAlign: A Recipe for Long Context Alignment of Large Language Modelscited by 106
- 2024Reinforcement Learning for LLM Post-Training: A Surveycited by 92
- 2025Stress Testing Deliberative Alignment for Anti-Scheming Trainingcited by 86
- 2024On the Diversity of Synthetic Data and its Impact on Training Large Language Modelscited by 59
- 2024Bayesian Reward Models for LLM Alignmentcited by 35
- 2024SPRIG: Improving Large Language Model Performance by System Prompt Optimizationcited by 29
- 2024Mission Impossible: A Statistical Perspective on Jailbreaking LLMscited by 24
- 2024Long Context Alignment with Short Instructions and Synthesized Positionscited by 22
- 2024PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMscited by 21
- 2025Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problemcited by 4
- 2023Exploiting Input Sanitization for Regex Denial of Servicecited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations
- 2024Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks
- 2026Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory
- 2025Attack and defense techniques in large language models: A survey and new perspectives
- 2025Learning to Extract Context for Context-Aware LLM Inference
- 2023Hijacking Large Language Models via Adversarial In-Context Learning
- 2023Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injection