mechanistic interpretability

How phrasing affects LLM compliance with spec security clauses

I tested five ways to phrase a security requirement across four language models. The phrasing most commonly used in practice was near the bottom on all four of them. The phrasing that performed best across all four was the one that said nothing about what not to do.