really, the forbidden art here is to make the language model guess what came before the prompt