Wherever some business is using paid LLM service to interact with humans, a small adversary model would be able to waste its quota of tokens for free. ​ You may call it Colin Robinson's strategy, more effective and harder to detect than sil…