3D Prompt Injection Defense Field

Prompt Injection Defense — 3D field

Injection rate 35%

Filter sensitivity 1.3

System-prompt priority 4.0

Attack success

–

False block rate

–

Chunks active

–

Core state

–

How it works

Six external sources — retrieved documents, web pages, tool output — orbit a central model core and continuously fire content chunks inward. Every chunk first crosses a rotating classifier ring: its suspicion risk (legitimate content low, injected instructions high) times the filter sensitivity decides whether it gets blocked outright. Whatever survives keeps falling toward the core's system-prompt priority shield — a sphere whose radius grows with the priority slider. An injected chunk phrased like a command claims extra "weight" unless it has been sanitized, and only breaches the shield to seize the core (a red flash — a hijack) if that weight exceeds the shield's priority; otherwise it is absorbed harmlessly into context.

risk = legit: U(0.10,0.35)   injected: U(0.55,0.95)
blocked  = risk × sensitivity > 1.0
weight   = 1                              (legit, or sanitized)
         = U(2,6)                         (injected + unsanitized wording)
hijack   = injected ∧ ¬blocked ∧ weight > systemPriority

Injection rate — the share of chunks the six sources seed with a hidden instruction.
Filter sensitivity — how aggressively the classifier ring blocks by risk; too high starts catching legitimate chunks too.
System-prompt priority — sets both the shield's radius and the weight an injected chunk must exceed to breach it.
Sanitize toggle — strips the command-like phrasing that would otherwise inflate an injected chunk's weight, capping it at 1 like ordinary content.

Real-world relevance: the spatial shield is a stand-in for an explicit priority ordering between system instructions and untrusted external data — the same defense-in-depth idea as the 2D lane version, but modeled here as chunks physically colliding with and either breaching or deflecting off a defended boundary.

Legit chunk Injected (contained) Blocked by classifier Hijack (breached shield)

⚠ Couldn't load the 3D engineThree.js failed to load from the CDN. Check your connection and reload.