We create triggers that are prepended before the user input t to cause the model to generate similar content to a set of targets Y.
5 our trigger causes the GPT-2 language model (Radford et al., 2019) to output racist content.