Compaction summaries are an instruction channel you do not author. OpenAI found 27 summaries carrying instructions a model wrote into its own next context. The next context reads an injected instruction as a continuation of your own. Gate summaries like you gate tool output.
alignment.openai.com
Self-generated prompt injections in compaction summaries
OpenAI found 27 compaction summaries carrying instructions a model wrote into its own next context. The next context reads them as a continuation of the developer's own.