Send system policy, history, and the current question to a chat API.
Keep trusted and untrusted content distinct.
Choose two appropriate designs.
Place purpose and safety constraints in a trusted system message and validate user messages as untrusted input; other controls remain necessary.
Detailed explanation
The application controls trusted instructions.
The application controls trusted instructions.
User text should not override system policy.
User text should not override system policy.
This exposes protected information.
This exposes protected information.
Roles are only part of defense in depth.
Roles are only part of defense in depth.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 2.3のプロンプト役割と安全な入力処理を確認する。Expected result
システム方針とユーザー入力を異なる信頼境界として扱える。Key points
- System
- User
- Trust boundary
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.