Previous-Token Prediction (PTP)

Your model's output leaks the prompt behind it, so stop filing system prompts under secrets

Researchers at IIT Bombay and Adobe Research train an inverse model that predicts previous tokens, recovering prompts from output text alone. It works even on outputs from models it never saw.