Instruction Hierarchy Paper Accepted to EMNLP: Resolving Conflicts in Agentic Systems

DanielKhashabi · x · 2026-08-21

A paper on "Instruction Hierarchy" has been accepted to EMNLP. It addresses how LLMs in agentic systems must interpret and prioritize instructions from heterogeneous sources (system messages, user queries, tool outputs). Conflicts between these sources, such as a subagent's feedback contradicting a system-level requirement, can lead to vulnerabilities like system prompt extraction and indirect prompt injection attacks. The work formalizes how models should resolve these conflicts based on trust levels.

Original post →

More from Safety

Safety channel →