I think this language is fascinating, but immediately reached a similar conclusion: it might trip up an LLM consuming the text directly but once an interpreter/compiler/decompiler has been written for the language it's trivial for an agent to consume these programs and produce them.
Now on the other hand, as a class of techniques - "anti-LLM languages" - it might be a useful method of emitting code that some agents with the correct tools can consume and others cannot, by design. Evolving such techniques with differing specifications might make for an interesting line of investigation.
Indeed, and an interpreter has been written[1]. As part of the benchmarks, in some cases the models receive a binary of the interpreter and indeed some of them attempt to reverse engineer it. So that already helps the models a bunch.
I do think this will also eventually make it into the training data, but that will in itself be interesting to see. It's also possible for KillSwitch to evolve and gain/remove features over time to constantly evade the LLMs.
Now on the other hand, as a class of techniques - "anti-LLM languages" - it might be a useful method of emitting code that some agents with the correct tools can consume and others cannot, by design. Evolving such techniques with differing specifications might make for an interesting line of investigation.
reply