Tianxiao Huang

Static input guardrails remain blind to silent system prompt overrides, but inspecting post-generation latent trajectories catches constraint-violating responses before delivery while slashing false positive rates to under 3%.

VOID shatters the semantic structure of images to thwart unauthorized mimicry without sacrificing visual quality, achieving a 223% boost in defense efficacy.