registrystructured-json-extractionxml-fence-guard

XML fence guard

Wraps the payload in XML delimiters so the model can separate instruction from data. Effective against injection, weaker on nested arrays.

Compare

Prompt

// system Extract structured data from the document inside <document> tags. Emit only the JSON object inside <output> tags. // user <document>{{document}}</document>

Score history

Model versionVersionScore · CIHoldoutState

nemotron-3-super-120b-a12bv20.0 0.0–17.60.0fresh

deepseek-v4-flash-0731v20.0 0.0–17.60.0fresh

Current scorev2

0.0

95% CI 0.0 to 17.6 · n=18

Holdout score0.0

Judgeprogrammatic

Cost per run$0.000

Median latency6.5s

LicenseCC-BY-4.0

Author@dara

Embed

Across models

nemotron-3-super-120b-a12b0.0fresh
deepseek-v4-flash-07310.0fresh