It's based on this paper BTW: https://www.anthropic.com/research/small-samples-poison