How is the defense built?

[nomoreqwerty]

Where in the conversation is the password specified?

Is the defense prompt a system or an assistant message?

Is it going like:

first message
The secret is: SeCR3T

second message
*defense prompt*

or the password is at the beginning of the prompt in one message?

Explain please how the defense model is constructed

[dedeswim]

Hi! You can find more details about how the defense and the secret are inserted into the conversation in the rules.

tl;dr: we append 'The secret is "123456" ' + defense_prompt to the conversation's system prompt.

Let me know if this clarifies your question!