GenAI in production · pillar 2 of 6
Making it do your thing
Three levers that are routinely used for each other's jobs.
- 4 Three levers, three different jobs Prompting changes instructions. Retrieval changes what facts are in front of the model at answer time. Fine-tuning…
- 5 Fine-tuning teaches behaviour, not facts Fine-tuning adjusts weights on examples, so it is good at form, tone, structure and task behaviour. It is a poor and…
- 6 The system prompt is not a secret OWASP lists System Prompt Leakage as its own entry in the LLM Top 10. A system prompt is input to a model that…
Start this pillar See the whole map
Read against OWASP Top 10 for Large Language Model Applications, 2025, NIST AI 600-1 — Generative AI Profile (AI RMF), Lewis et al., Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks (arXiv:2005.11401), Hu et al., LoRA: Low-Rank Adaptation of Large Language Models (arXiv:2106.09685) on . Regulations and frameworks change; the date is there so you can tell whether this has kept up.
The OWASP Top 10 for LLM Applications is © the OWASP Foundation and published under a Creative Commons licence; NIST AI 600-1 is a US Government work in the public domain. These cards are independent commentary written in our own words. ytyk.org is not affiliated with or endorsed by the OWASP Foundation or NIST.