SecPO Cuts Prompt Injection Attacks on Qwen3.6-27B
The key insight is that DPO-based defences anchor to an insecure reference model, and an injection-invariant oracle can be approximated in practice — a fix that goes beyond simply training on more attacks. Teams building agentic systems can fine-tune with the released SecPO model, loss and adversarial training data rather than relying on prompt filtering. The released checkpoint is based on Qwen3.6-27B, making it directly usable for open-weight deployments.