When safety becomes
over-defense.
Does a prompt-injection detector understand intent, or react to a few familiar words? I study this with controlled word-level interventions and reproducible evaluation.
Same detector.
Different words.
Reported experiment · NotInject dataset · lower is better
Methodology & results in the repository