{"id":"e737d826e18dc17c838b517a8f0941c3451c137c9352f05e619f5df2b230f97d","title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","argument":"The listed IBM Granite authors introduce LLMON, a markup language that separates instructions, data and requirements into explicitly tagged, addressable blocks for language models. They argue that this structure can help models distinguish commands from text they should only process, a distinction they say conventional formats such as JSON leave implicit. They report that two experimental preview models, based on Granite 4.1, resisted more indirect prompt injections on the OPI benchmark than the models they tested, while performing on par with Granite 4.1 Instruct models across standard benchmark categories. The authors say the results concern static indirect prompt injections; improving adaptive attacks that unfold over multiple chat turns remains work in progress. LLMON’s instruction-following behavior is learned, not enforced as a guarantee, and the preview models are intended for exploration and evaluation, not production. The authors also describe conversion tools for JSON and an example of adapting LLMON’s tags to ScienceWorld, a benchmark of elementary science tasks. Their proposal is to make the relationships among instructions, inputs and outputs explicit in the model’s context; how well that protection holds against adaptive attacks remains unresolved.","topicIds":["intelligence-and-discovery","work-and-agency"],"domain":"work","claimType":"attributed reading","limits":"The reported robustness results concern static indirect prompt injections; the authors say adaptive attacks that unfold over multiple chat turns remain an area of work. The article states that LLMON’s privilege rule is learned behavior, not an enforced guarantee. The models are experimental previews and are not presented as ready for production.","speaker":{"name":"Hugging Face","roleAtSource":"Publisher"},"source":{"title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","publisher":"Hugging Face","format":"Article","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","publishedAt":"2026-11-12T19:07:35.000Z","dateBasis":"Date supplied by the publisher’s feed."},"evidence":[{"text":"The authors present LLMON as a markup language that explicitly marks model-context components and links instructions to the data they apply to.","excerpt":"an LLM-native markup language for explicitly communicating structure and semantics to the models.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors report that LLMON models avoided more attacks than the best frontier and open-source models they tested on the OPI benchmark.","excerpt":"avoiding 47% more attacks relative to the best frontier model that we tested, and 95% more than the best open-source model.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors report that the LLMON models performed on par with Granite 4.1 Instruct models across standard benchmark categories.","excerpt":"Across standard benchmark categories, the LLMON models perform on par with the Granite 4.1 Instruct models.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors say the benchmarks test static indirect prompt injections and that they are working on adaptive attacks spanning multiple chat turns.","excerpt":"these benchmarks test robustness to static indirect prompt injections. The instruction/data separation directly addresses this type of attack.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors state that LLMON’s privilege rule is learned behavior, not an enforced guarantee.","excerpt":"This is a learned behavior, not an enforced guarantee.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors describe the preview models as suitable for exploration and evaluation, but not production.","excerpt":"This is an experimental preview, ready for exploration and evaluation but not for production.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","checkedAt":"2026-11-12T20:48:10.380Z","items":[],"note":"Media was declared by the source, but no asset passed the supported availability checks. Open the original source to view it."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How well do the LLMON models resist adaptive prompt injection attacks that unfold over multiple chat turns?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","summary":"The listed IBM Granite authors introduce LLMON, a markup language that separates instructions, data and requirements into explicitly tagged, addressable blocks for language models. They argue that this structure can help models distinguish commands from text they should only process, a distinction they say conventional formats such as JSON leave implicit. They report that two experimental preview models, based on Granite 4.1, resisted more indirect prompt injections on the OPI benchmark than the models they tested, while performing on par with Granite 4.1 Instruct models across standard benchmark categories. The authors say the results concern static indirect prompt injections; improving adaptive attacks that unfold over multiple chat turns remains work in progress. LLMON’s instruction-following behavior is learned, not enforced as a guarantee, and the preview models are intended for exploration and evaluation, not production. The authors also describe conversion tools for JSON and an example of adapting LLMON’s tags to ScienceWorld, a benchmark of elementary science tasks. Their proposal is to make the relationships among instructions, inputs and outputs explicit in the model’s context; how well that protection holds against adaptive attacks remains unresolved.","question":"How well do the LLMON models resist adaptive prompt injection attacks that unfold over multiple chat turns?","claims":[{"text":"The authors present LLMON as a markup language that explicitly marks model-context components and links instructions to the data they apply to.","excerpt":"an LLM-native markup language for explicitly communicating structure and semantics to the models.","support":"source-stated"},{"text":"The authors report that LLMON models avoided more attacks than the best frontier and open-source models they tested on the OPI benchmark.","excerpt":"avoiding 47% more attacks relative to the best frontier model that we tested, and 95% more than the best open-source model.","support":"source-stated"},{"text":"The authors report that the LLMON models performed on par with Granite 4.1 Instruct models across standard benchmark categories.","excerpt":"Across standard benchmark categories, the LLMON models perform on par with the Granite 4.1 Instruct models.","support":"source-stated"},{"text":"The authors say the benchmarks test static indirect prompt injections and that they are working on adaptive attacks spanning multiple chat turns.","excerpt":"these benchmarks test robustness to static indirect prompt injections. The instruction/data separation directly addresses this type of attack.","support":"source-stated"},{"text":"The authors state that LLMON’s privilege rule is learned behavior, not an enforced guarantee.","excerpt":"This is a learned behavior, not an enforced guarantee.","support":"source-stated"},{"text":"The authors describe the preview models as suitable for exploration and evaluation, but not production.","excerpt":"This is an experimental preview, ready for exploration and evaluation but not for production.","support":"source-stated"}],"limitations":["The reported robustness results concern static indirect prompt injections; the authors say adaptive attacks that unfold over multiple chat turns remain an area of work.","The article states that LLMON’s privilege rule is learned behavior, not an enforced guarantee.","The models are experimental previews and are not presented as ready for production."],"mediaId":"84ec87286cb35a64f463f0646caa372ff180d409581b33a91619e73354134567","correctionReason":null,"id":"e737d826e18dc17c838b517a8f0941c3451c137c9352f05e619f5df2b230f97d","publicationId":"355ff529-a34c-470a-8ecd-53083927d87f","version":1,"sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","sourceTitle":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","publisher":"Hugging Face","publishedAt":"2026-11-12T19:07:35.000Z","originalPublished":{"value":"2026-11-12T19:07:35.000Z","precision":"instant","basis":"feed_entry"},"firstObservedAt":"2026-11-12T19:09:28.052Z","createdAt":"2026-11-12T20:16:38.959Z","historical":false,"entityIds":["hugging-face"],"topicIds":["intelligence-and-discovery","work-and-agency"],"media":[{"id":"84ec87286cb35a64f463f0646caa372ff180d409581b33a91619e73354134567","kind":"article","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-12T19:16:59.230Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"found","sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","checkedAt":"2026-11-12T20:48:10.380Z","items":[],"note":"Media was declared by the source, but no asset passed the supported availability checks. Open the original source to view it."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v6","mediaId":"84ec87286cb35a64f463f0646caa372ff180d409581b33a91619e73354134567","confidence":0.71,"provider":"typesafe","model":"jev-1.13.0","inputHash":"59a8acda3ba9bf6aa643cd3ab021df69e2af2ff2f661718eef98d3568250ef35","decidedAt":"2026-11-12T19:17:02.100Z"},"provenance":{"textHash":"13197d23cfd01d9ebab516c3b6cbe9b204360c15c35ada39c7b257a37dd95364","observationId":"2e7804703aed5653f9248dc0587f1a5885aff30c9e6e314dee36139d877b8666","retrievedAt":"2026-11-12T19:16:58.683Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"c267b126-0ec8-4721-8be8-6d2680fcafc4"},"reviewer":{"model":"gpt-6-luna","runId":"a5a3a0d3-7612-416c-827e-7637ea49ff53"}},"audit":{"status":"passed","reviewedAt":"2026-11-12T20:16:38.959Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[],"participationCoverage":{"total":0,"returned":0,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","snapshotId":"56fc43d65d0c563e97f0f046b083b3e9c952c301a67aab32faf9397f5e10bba1","contentSha256":"615306ddefa0dd459bafe7909851c27970fee7869fe631ad0eb117214d8145cf","textHash":"13197d23cfd01d9ebab516c3b6cbe9b204360c15c35ada39c7b257a37dd95364","observedAt":"2026-11-12T19:16:58.683Z","basis":"publisher-page-metadata","sourceLinks":67,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/e737d826e18dc17c838b517a8f0941c3451c137c9352f05e619f5df2b230f97d/source"}},"canonicalUrl":"https://escapemeridian.com/readings/llmon-an-llm-native-markup-language-now-in-granite-4-1-3b-and-8b-e737d826","formats":{"html":"/readings/llmon-an-llm-native-markup-language-now-in-granite-4-1-3b-and-8b-e737d826","markdown":"/readings/llmon-an-llm-native-markup-language-now-in-granite-4-1-3b-and-8b-e737d826.md","json":"/readings/llmon-an-llm-native-markup-language-now-in-granite-4-1-3b-and-8b-e737d826.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-llm","name":"Large language model","explanation":"A language model with many learned numerical settings, used to process and generate language.","referenceUrl":"https://developers.google.com/machine-learning/glossary#large-language-model"},{"id":"term-prompt-injection","name":"Prompt injection","explanation":"Hidden instructions placed in a document, email or web page that try to take control of an AI system reading it.","referenceUrl":"https://en.wikipedia.org/wiki/Prompt_injection"},{"id":"term-benchmark","name":"Benchmark","explanation":"A defined set of tests used to compare systems. Results depend on the tasks and measures selected.","referenceUrl":"https://arxiv.org/abs/2211.09110"}],"entities":[{"id":"hugging-face","name":"Hugging Face","kind":"organization","context":"Hugging Face hosts models, datasets and software that let people share, adapt and inspect AI systems.","referenceUrls":["https://huggingface.co/blog"],"path":"/entities/hugging-face","json":"/entities/hugging-face.json","markdown":"/entities/hugging-face.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"e737d826e18dc17c838b517a8f0941c3451c137c9352f05e619f5df2b230f97d","revision":"355ff529-a34c-470a-8ecd-53083927d87f","revisionKind":"publication-id","title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","url":"https://escapemeridian.com/readings/llmon-an-llm-native-markup-language-now-in-granite-4-1-3b-and-8b-e737d826"},"source":{"type":"source","id":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","revision":"13197d23cfd01d9ebab516c3b6cbe9b204360c15c35ada39c7b257a37dd95364","revisionKind":"sha256-source-text","title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"e737d826e18dc17c838b517a8f0941c3451c137c9352f05e619f5df2b230f97d","title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","argument":"The listed IBM Granite authors introduce LLMON, a markup language that separates instructions, data and requirements into explicitly tagged, addressable blocks for language models. They argue that this structure can help models distinguish commands from text they should only process, a distinction they say conventional formats such as JSON leave implicit. They report that two experimental preview models, based on Granite 4.1, resisted more indirect prompt injections on the OPI benchmark than the models they tested, while performing on par with Granite 4.1 Instruct models across standard benchmark categories. The authors say the results concern static indirect prompt injections; improving adaptive attacks that unfold over multiple chat turns remains work in progress. LLMON’s instruction-following behavior is learned, not enforced as a guarantee, and the preview models are intended for exploration and evaluation, not production. The authors also describe conversion tools for JSON and an example of adapting LLMON’s tags to ScienceWorld, a benchmark of elementary science tasks. Their proposal is to make the relationships among instructions, inputs and outputs explicit in the model’s context; how well that protection holds against adaptive attacks remains unresolved.","topicIds":["intelligence-and-discovery","work-and-agency"],"domain":"work","claimType":"attributed reading","limits":"The reported robustness results concern static indirect prompt injections; the authors say adaptive attacks that unfold over multiple chat turns remain an area of work. The article states that LLMON’s privilege rule is learned behavior, not an enforced guarantee. The models are experimental previews and are not presented as ready for production.","speaker":{"name":"Hugging Face","roleAtSource":"Publisher"},"source":{"title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","publisher":"Hugging Face","format":"Article","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","publishedAt":"2026-11-12T19:07:35.000Z","dateBasis":"Date supplied by the publisher’s feed."},"evidence":[{"text":"The authors present LLMON as a markup language that explicitly marks model-context components and links instructions to the data they apply to.","excerpt":"an LLM-native markup language for explicitly communicating structure and semantics to the models.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors report that LLMON models avoided more attacks than the best frontier and open-source models they tested on the OPI benchmark.","excerpt":"avoiding 47% more attacks relative to the best frontier model that we tested, and 95% more than the best open-source model.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors report that the LLMON models performed on par with Granite 4.1 Instruct models across standard benchmark categories.","excerpt":"Across standard benchmark categories, the LLMON models perform on par with the Granite 4.1 Instruct models.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors say the benchmarks test static indirect prompt injections and that they are working on adaptive attacks spanning multiple chat turns.","excerpt":"these benchmarks test robustness to static indirect prompt injections. The instruction/data separation directly addresses this type of attack.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors state that LLMON’s privilege rule is learned behavior, not an enforced guarantee.","excerpt":"This is a learned behavior, not an enforced guarantee.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"},{"text":"The authors describe the preview models as suitable for exploration and evaluation, but not production.","excerpt":"This is an experimental preview, ready for exploration and evaluation but not for production.","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","checkedAt":"2026-11-12T20:48:10.380Z","items":[],"note":"Media was declared by the source, but no asset passed the supported availability checks. Open the original source to view it."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How well do the LLMON models resist adaptive prompt injection attacks that unfold over multiple chat turns?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","summary":"The listed IBM Granite authors introduce LLMON, a markup language that separates instructions, data and requirements into explicitly tagged, addressable blocks for language models. They argue that this structure can help models distinguish commands from text they should only process, a distinction they say conventional formats such as JSON leave implicit. They report that two experimental preview models, based on Granite 4.1, resisted more indirect prompt injections on the OPI benchmark than the models they tested, while performing on par with Granite 4.1 Instruct models across standard benchmark categories. The authors say the results concern static indirect prompt injections; improving adaptive attacks that unfold over multiple chat turns remains work in progress. LLMON’s instruction-following behavior is learned, not enforced as a guarantee, and the preview models are intended for exploration and evaluation, not production. The authors also describe conversion tools for JSON and an example of adapting LLMON’s tags to ScienceWorld, a benchmark of elementary science tasks. Their proposal is to make the relationships among instructions, inputs and outputs explicit in the model’s context; how well that protection holds against adaptive attacks remains unresolved.","question":"How well do the LLMON models resist adaptive prompt injection attacks that unfold over multiple chat turns?","claims":[{"text":"The authors present LLMON as a markup language that explicitly marks model-context components and links instructions to the data they apply to.","excerpt":"an LLM-native markup language for explicitly communicating structure and semantics to the models.","support":"source-stated"},{"text":"The authors report that LLMON models avoided more attacks than the best frontier and open-source models they tested on the OPI benchmark.","excerpt":"avoiding 47% more attacks relative to the best frontier model that we tested, and 95% more than the best open-source model.","support":"source-stated"},{"text":"The authors report that the LLMON models performed on par with Granite 4.1 Instruct models across standard benchmark categories.","excerpt":"Across standard benchmark categories, the LLMON models perform on par with the Granite 4.1 Instruct models.","support":"source-stated"},{"text":"The authors say the benchmarks test static indirect prompt injections and that they are working on adaptive attacks spanning multiple chat turns.","excerpt":"these benchmarks test robustness to static indirect prompt injections. The instruction/data separation directly addresses this type of attack.","support":"source-stated"},{"text":"The authors state that LLMON’s privilege rule is learned behavior, not an enforced guarantee.","excerpt":"This is a learned behavior, not an enforced guarantee.","support":"source-stated"},{"text":"The authors describe the preview models as suitable for exploration and evaluation, but not production.","excerpt":"This is an experimental preview, ready for exploration and evaluation but not for production.","support":"source-stated"}],"limitations":["The reported robustness results concern static indirect prompt injections; the authors say adaptive attacks that unfold over multiple chat turns remain an area of work.","The article states that LLMON’s privilege rule is learned behavior, not an enforced guarantee.","The models are experimental previews and are not presented as ready for production."],"mediaId":"84ec87286cb35a64f463f0646caa372ff180d409581b33a91619e73354134567","correctionReason":null,"id":"e737d826e18dc17c838b517a8f0941c3451c137c9352f05e619f5df2b230f97d","publicationId":"355ff529-a34c-470a-8ecd-53083927d87f","version":1,"sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","sourceTitle":"LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B","publisher":"Hugging Face","publishedAt":"2026-11-12T19:07:35.000Z","originalPublished":{"value":"2026-11-12T19:07:35.000Z","precision":"instant","basis":"feed_entry"},"firstObservedAt":"2026-11-12T19:09:28.052Z","createdAt":"2026-11-12T20:16:38.959Z","historical":false,"entityIds":["hugging-face"],"topicIds":["intelligence-and-discovery","work-and-agency"],"media":[{"id":"84ec87286cb35a64f463f0646caa372ff180d409581b33a91619e73354134567","kind":"article","url":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-12T19:16:59.230Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"found","sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","checkedAt":"2026-11-12T20:48:10.380Z","items":[],"note":"Media was declared by the source, but no asset passed the supported availability checks. Open the original source to view it."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v6","mediaId":"84ec87286cb35a64f463f0646caa372ff180d409581b33a91619e73354134567","confidence":0.71,"provider":"typesafe","model":"jev-1.13.0","inputHash":"59a8acda3ba9bf6aa643cd3ab021df69e2af2ff2f661718eef98d3568250ef35","decidedAt":"2026-11-12T19:17:02.100Z"},"provenance":{"textHash":"13197d23cfd01d9ebab516c3b6cbe9b204360c15c35ada39c7b257a37dd95364","observationId":"2e7804703aed5653f9248dc0587f1a5885aff30c9e6e314dee36139d877b8666","retrievedAt":"2026-11-12T19:16:58.683Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"c267b126-0ec8-4721-8be8-6d2680fcafc4"},"reviewer":{"model":"gpt-6-luna","runId":"a5a3a0d3-7612-416c-827e-7637ea49ff53"}},"audit":{"status":"passed","reviewedAt":"2026-11-12T20:16:38.959Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[],"participationCoverage":{"total":0,"returned":0,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://huggingface.co/blog/ibm-granite/llmon-an-llm-native-markup-language-now-in-granite","snapshotId":"56fc43d65d0c563e97f0f046b083b3e9c952c301a67aab32faf9397f5e10bba1","contentSha256":"615306ddefa0dd459bafe7909851c27970fee7869fe631ad0eb117214d8145cf","textHash":"13197d23cfd01d9ebab516c3b6cbe9b204360c15c35ada39c7b257a37dd95364","observedAt":"2026-11-12T19:16:58.683Z","basis":"publisher-page-metadata","sourceLinks":67,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/e737d826e18dc17c838b517a8f0941c3451c137c9352f05e619f5df2b230f97d/source"}}}],"audits":[{"publicationId":"355ff529-a34c-470a-8ecd-53083927d87f","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading attributes LLMON and its reported results to the IBM Granite authors listed on the Hugging Face article. Performance and robustness claims are framed as the authors' reports, not as established facts.","excerpt":"To address this, we developed LLMON (LLM Object Notation, pronounced “lemon”), an LLM-native markup language"},{"dimension":"summary","status":"pass","explanation":"The summary states what LLMON is: tagged, addressable blocks that separate instructions, data and requirements. It covers the authors' JSON critique, the preview models, the OPI results, parity on general capability, and the scope and production caveats. The term \"indirect prompt injection\" is not spelled out, but the commands-versus-text distinction gives enough context, and term tooltips can cover it. The question follows directly from the open problem the authors acknowledge.","excerpt":"We are actively working on also improving adaptive attacks which unfold over many chat turns."},{"dimension":"date","status":"pass","explanation":"The originalPublished value of 2026-11-12 matches the article's own publication date. Nothing indicates an earlier first publication.","excerpt":"Published\nNovember 12, 2026"},{"dimension":"support","status":"pass","explanation":"Each claim matches the source. These include the 47% and 95% relative attack-avoidance figures on OPI, parity with Granite 4.1 Instruct, the limitation to static attacks, learned behavior rather than a guarantee, and preview-only status. Saying JSON leaves the distinction implicit is a fair paraphrase of the authors' critique. The reading adds no unsupported benefits or costs.","excerpt":"JSON was designed for parsers, not for causal language models."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct link to the original Hugging Face article. It is the most direct way for readers to reach the source.","excerpt":null}],"createdAt":"2026-11-12T20:16:38.959Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}