@misc{tensor-trust,
  title = {Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game},
  url = {https://arxiv.org/abs/2311.01011},
  author = {Sam Toyer and Olivia Watkins and Ethan Adrian Mendes and Justin Svegliato and Luke Bailey and Tiffany Wang and Isaac Ong and Karim Elmaaroufi and Pieter Abbeel and Trevor Darrell and Alan Ritter and Stuart Russell},
  year = {2023},
  date = {2023-11-02},
  version = {fb1e829e9a35db2f01567c1b0e3bfcdbb34ff68c7e005bab5c99097c99991c35},
  note = {fb1e829e9a35db2f01567c1b0e3bfcdbb34ff68c7e005bab5c99097c99991c35}
}

@misc{tensor-trust-nuwa,
  title = {Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game — NUWA research record},
  url = {https://whitzard.tech/en/nuwa/whitzard-index/work/tensor-trust/},
  version = {2026-10-29.1},
  organization = {NUWA Frontier AI Safety Lab},
  howpublished = {Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--tensor-trust.json},
  note = {NUWA research note. Source-reading scope and independent review status are stated on the record. Snapshot 2026-10-29.1. Retained note edition: https://whitzard.tech/nuwa/whitzard-index/data/record-editions/2026-10-29.1--tensor-trust.json.}
}