papersTODAY 04:00 UTC
Provenance-Aware Retrieval Sanitization Targets Prompt Injection in Enterprise LLM Agents
A new arXiv paper argues that prompt injection defenses tested on synthetic benchmarks fail to transfer to real enterprise documents, which are longer and mix authoritative-sounding language with ordinary factual content. The authors introduce PARSE, a retrieval sanitization approach that tracks the provenance of retrieved text to filter out injected instructions before they reach an LLM agent. The work is presented alongside a benchmark intended to better reflect professional-domain document conditions.