Also note that well aligned models are not sufficient to solve prompt injection by themselves yet. That said, we have solved prompt injectio…

Also note that well aligned models are not sufficient to solve prompt injection by themselves yet. That said, we have solved prompt injection in practice when layering our latest models with prompt injection probes (on by default for all traffic) and auto mode (also on by default). The little bit of scaffolding helps. https://x.com/bcherny/status/2085860677990883454?s=46 turns out you can get indirect prompt injection to ~0 on unseen attacks if you stack enough layers (model training + input probes + a classifier checking intent). didn't expect that a year ago. auto mode is default in claude code as of next week https://claude.com/blog/auto-mode-…

Source: Boris Cherny (X) | 2026-09-09