LLMON Framework Reduces Prompt Injection via Structured Post-Training
October 30, 2026
LLMON uses LLM Object Notation to explicitly separate executable instructions from passive data during post-training. Fine-tuning Granite-4.1 3B and 8B models on 4.6B tokens of structured data significantly reduces attack success rates for indirect prompt injection.
HOW THIS AFFECTS YOU
●
builderYou can improve system security by adopting structured notation to prevent data from being executed as instructions.
●
researcherYou can explore instruction-data separation as a robust alternative to inference-time filtering.