nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqxzph26ctgluluhk0mcd0qn7sj9u0wvjentym6a345j6vsuk0qrmqhmtuer (nprofile…tuer) I’d imagine the challenge would be to design a transform that forces the LLM to process its output directly, and that is resistant to the LLM discovering and reversing the transform.
In the limit, this sounds similar to indistinguishability obfuscation, a cryptographic technique that while it has been around for a long time hasn’t reached anywhere near practicality yet.