you can just look at the traffic in mitmproxy.

I've spent the last year working as an annotator/evaluator for DataAnnotation. All the frontier/flagship model providers use independent contractors for iterating on their LLMs. I'm not able to tell you which models I've worked on as a term of my NDA.

The system prompt seems plausible, but in my experience they are much much much much longer and more verbose.

Yes that's been obvious since the beginning. That's why you should always monitor your agents closely. Just like supervised self driving cars, you have to watch the road and do some hand holding.

The tooling around isolation, logging, and real time security/anonomly detection for regular LLM laptop users is very immature right now. I expect that to change soon.

The alternative is extremely locked down models which is what Anthropic seems to want to do.

It’s equivalent to having client-side input validation. Yes it can easily be bypassed, but in the vast majority of cases where users aren’t malicious it gets the job done quickly and cheaply.

it is a heuristic though, and can be measured as such.

my steel yield strength table is similarly not guaranteed to be correct for the piece of steel that I have in front of me.

As reliable as telling a pachinko machine: don’t lose my money!