10 min read
Beating Gandalf, Part 2: When the Guardrail Is Another LLM (Levels 4–6)
Levels 4–6 replace dumb string filters with LLM-as-judge guards on the input and output. Smarter, harder, and still beatable with indirection. Here's how, and what the actual guard code looks like.