Are You Reading the Right Thing? Rethinking Internal Signals for Prompt-Injection Detection

Several recent studies propose detecting prompt injections from a language model's internal state. However, these methods do not measure a single security property. Residual-stream probes, attention scores, role projections, exposure probes, and concept readouts may capture injection presence,...