Quantifying Prompt Injection Resistance in Small Language Models (7B parameter model)

Abstract / TL;DR Over two weeks, I deployed and red-teamed two locally-hosted Qwen2.5 models (0.5B and 7B parameters) behind a custom three-layer guardrail stack (regex input filtering, system-prompt