llm-reliability-requires-five-independent-defense-dimensions

IN derived (depth 4)

Created 2026-06-21T10:16:20+00:00 · Reviewed 2026-06-21T14:41:08+00:00

LLM reliability requires independent defenses across at least five dimensions — two control layers (training-time alignment, inference-time prompting) and three security surfaces (training data poisoning, prompt injection, architectural vulnerability) — with no single defense sufficient on its own.

Justifications

SL — Control and security taxonomies are orthogonal; combining them reveals the full five-dimensional defense surface

Antecedents (all must be IN):

IN llm-control-operates-at-training-and-inference-layers — LLM behavior control has developed along two axes: training-time alignment (which diversified from RLHF into three independent paradigms — full RLHF, DPO/IPO/KTO, and Constitutional AI) and inference-time prompting (which evolved from linear CoT through self-consistency to branching ToT, adding search structure to manage prompt-dependent variability). The antecedents establish these as parallel developments but do not directly establish that they compensate for each other's specific limitations.
IN llm-security-requires-defense-across-three-independent-surfaces — LLM security threats operate across three independent attack surfaces requiring distinct defenses: training data poisoning (deliberate grooming of web content), architectural prompt sensitivity (40%+ accuracy shifts from formatting, instruction-input confusion), and inference-time injection — and the architectural vulnerabilities are fundamental, not solvable by engineering or scale.

Dependents

These beliefs depend on this one:

OUT continuous-agents-deployable-with-defense-in-depth — Continuous agents with persistent memory are safely deployable at scale — persistent memory's paradigm-extending capability combined with five independent defense dimensions provides sufficient safeguards for long-horizon autonomous operation.
IN defense-in-depth-required-and-bounded-by-theory-gap — The five-dimensional defense requirement for LLM reliability is both necessitated and bounded by insufficient formal understanding — no single defense layer has theoretical guarantees (hence defense-in-depth is required), but the same theory gap means defense-in-depth itself lacks formal assurance of adequacy, creating an irreducible reliance on empirical validation.
OUT five-defense-dimensions-adequate-for-agentic-reliability — The five independent LLM defense dimensions — training-time alignment, inference-time prompting, data integrity, architectural hardening, and monitoring — provide adequate reliability for large-scale agentic deployment when all dimensions are simultaneously maintained and the three convergent capabilities (context windows, alignment, efficiency) are in place.