LLMON gives model context an explicit structure: Granite 4.1 3B and 8B previews cut OPI injection attacks to near zero
IBM researchers released LLMON (LLM Object Notation), a markup language that uses reserved special tokens to mark the boundaries of instructions, data and requirements, together with two experimental preview models trained from Granite 4.1 3B and 8B base checkpoints. The approach turns each semantically coherent component of the context into an addressable block, and an execution block states which instruction to run, which data it operates on, and where the output goes. On the OPI benchmark the LLMON previews avoided 47% more attacks than the best frontier model tested and 95% more than the best open-source model, while general benchmark performance stayed on par with Granite 4.1 Instruct.